Information Security Policy

Information Security Policy:

• Regulate activities carried out under the information security policy through procedures and guidelines developed in accordance with the ISO/IEC 27001:2022 standard;
• Ensure the company's information security policy activities comply with the Law on Cybersecurity, the Law on Protection of Personal Data, the Law on Insurance of Mongolia, and other relevant laws, regulations, and international standards;
• Ensure information security and cybersecurity when cooperating with insured individuals, organizations, and third parties;
• Protect the confidentiality of information belonging to insured individuals, organizations, and third parties;
• Conduct regular risk assessments to identify potential risks to the confidentiality, integrity, and availability of information, information systems, infrastructure, software, information networks, core data-processing systems, and databases;
• Ensure the continuous, uninterrupted operation of products, services, core systems, and infrastructure in order to improve the expectations, trust, and satisfaction of insured individuals, organizations, and third parties;
• Effectively implement international standards, adapted to the company's specific characteristics, in order to reduce risks related to the information security policy;