Information Security Statement

Ink is committed to maintain and improve information security within the organisation and minimise its exposure to risks. It is therefore organisation policy to ensure that:

1. The integrity of information shall be assured
2. The confidentiality of customer’s information shall be assured
3. The privacy, confidentiality, and integrity of customer’s PHI shall be protected
4. Information shall be protected against unauthorised access
5. Information shall be made available to authorised business processes, users, and customers when required.
6. Regulatory, statutory, and legislative requirements shall be met
7. Business continuity plans for mission-critical activities shall be produced, maintained, and tested
8. Information security awareness shall be made available to all users
9. Breach of information security, actual or suspected shall be reported and will be investigated by the Technical team under the supervision of executive management
10. PHI shall be made available to patients, government officials, airlines or authorised third parties after prior consent from the patient.

All users of Ink information technology resources are responsible for complying with this policy. Every user is accountable for:

1. Ensuring that no breach of information security shall occur from their actions
2. Reporting any breach or suspected breach of security to relevant parties

The Chief Information Security Officer is ultimately responsible for implementing the policy within the company, and for monitoring adherence by the users. This includes:

1. Assigning responsibilities for information security management to the relevant staff
2. Determining access rights for information assets and systems or delegating such determination accordingly. 
3. Ensuring that all users of information technology resources are aware of their accountability and they are aware that failure to comply with the Information Security Policy is a disciplinary offence.