Security

FlexEarn Information Security Policy

1.0. Policy Objective

To protect the information assets that FlexEarn Ltd handles, stores, exchanges, processes, and can access, while maintaining their confidentiality, integrity, and availability.

We implement controls designed to protect information assets in proportion to their value and the threats they face, comply with relevant legal, customer, and third-party requirements, and continually improve our Information Security Management System.

2.0. Scope

This policy applies to the people, processes, services, technology, and assets within the FlexEarn information security scope. It also applies to employees and subcontractors of security-critical suppliers where they access or process FlexEarn information assets.

3.0. Core Policy

FlexEarn believes security incidents are preventable and is committed to maintaining an effective ISMS through structured governance, risk management, testing, training, and continuous review.

  • Implementation and maintenance of an independently certified ISO 27001 compliant ISMS.
  • Systematic identification of threats and risk-based implementation of controls.
  • Regular monitoring of threats and testing or auditing of control effectiveness.
  • Maintenance of a risk treatment plan focused on reducing security threats.
  • Maintenance and regular testing of a business continuity plan.
  • Clear definition of responsibilities for implementing the ISMS.
  • Training and guidance so employees understand their responsibilities and legal duties.
  • Implementation and maintenance of supporting security sub-policies and procedures.

The appropriateness and effectiveness of this policy are reviewed regularly by top management. Support for this policy is expected from all employees and contractors whose work affects information security.

All information security incidents must be reported to the CEO. Violations of this policy may be subject to the organisation’s Performance & Conduct Handbook.

Jonathan David
CEO & Founder
01/06/2025

Signed on behalf of FlexEarn Ltd