“Amar Insurance” LLC Commences Implementation of ISO/IEC 27001:2022 Information Security Standard
Information Security Policy:
- Information security controls and related activities are governed by internal policies, procedures, and guidelines developed in full compliance with the ISO/IEC 27001:2022 standard;
- The Company’s Information Security Policy is fully aligned with the laws and regulations of Mongolia, including the Law on Cybersecurity, the Law on the Protection of Personal Data, the Insurance Law, and other applicable legal, regulatory, and international standards;
- Information security and cybersecurity measures are consistently applied across all interactions and collaborations with insured individuals, corporate clients, business partners, and third parties;
- The confidentiality of information belonging to insured individuals, corporate clients, and third parties is strictly protected at all times;
- Regular risk assessments are conducted to identify, assess, and mitigate potential risks to the confidentiality, integrity, and availability of information, information systems, infrastructure, software, networks, core processing systems, and databases;
- The Company ensures the stable, secure, and uninterrupted operation of its products, services, core systems, and infrastructure in order to meet and enhance the expectations, trust, and satisfaction of insured individuals, corporate clients, and third parties;
- International information security standards are implemented in an optimized and scalable manner, tailored to the Company’s operational characteristics, to effectively reduce and manage information security risks.
