ISO 27001- Information Security Management System (ISMS) Policy
Protecting information through a culture of security, responsibility and continuous improvement.
At Avantech Ltd, information security is fundamental to how we operate. Our Information Security Management System (ISMS) Policy establishes the principles, responsibilities and controls that help us protect the confidentiality, integrity and availability of information across our organisation.
As part of our ongoing commitment to information security, we are currently implementing an ISMS aligned with ISO/IEC 27001:2022 as we progress towards certification.
Our Information Security Commitment
Information security is more than a technical requirement—it is an essential part of delivering trusted services to our customers, partners and employees.
Our ISMS Policy provides the framework for managing information securely by defining how we identify risks, protect information assets and continually improve our security practices.
It applies across our organisation, covering employees, contractors, business processes, information systems and information assets in every format.
For more information about our approach to information security, risk management, incident handling and continual improvement, you can review our Information Security Management System (ISMS) Policy
Our Information Security Principles
Our Information Security Management System is built around internationally recognised security principles that guide our day-to-day operations.
Confidentiality
Ensuring information is only accessible to authorised individuals and protected against unauthorised disclosure.
Integrity
Maintaining the accuracy, completeness and reliability of information throughout its lifecycle.
Availability
Ensuring critical information and systems remain available whenever they are needed to support business operations.
Risk Management
Identifying, assessing and treating information security risks through a structured and continually monitored approach.
Continual Improvement
Regularly reviewing our processes, measuring performance and strengthening our security controls to respond to evolving threats and business requirements.
What Our ISMS Policy Covers
Our Information Security Management System Policy establishes a consistent framework for protecting information by focusing on:
- Information security governance and accountability
- Risk assessment and risk treatment
- Protection of information assets
- Legal, regulatory and contractual compliance
- Security awareness and employee responsibilities
- Incident management and reporting
- Business continuity and resilience
- Ongoing monitoring and continual improvement
Together, these elements help ensure information is managed responsibly across the organisation.
Our ISO/IEC 27001 Journey
As part of our commitment to best practice, Avantech is currently implementing an Information Security Management System aligned with the requirements of ISO/IEC 27001:2022.
As we continue our ISO/IEC 27001 journey, we are enhancing our governance, policies, processes and security controls to build a robust Information Security Management System aligned with internationally recognised best practices.
Our ISMS Policy is one of the key foundations supporting this ongoing journey towards certification and reflects our commitment to building a mature, resilient and continuously improving information security programme.
Why Our ISMS Matters
Implementing a robust Information Security Management System enables us to:
- Protect sensitive business and customer information.
- Manage information security risks proactively.
- Strengthen operational resilience.
- Promote a culture of security awareness across the organisation.
- Support compliance with legal, regulatory and contractual obligations.
- Continually improve our security practices as threats and technologies evolve.
Our Commitment
Information security is a shared responsibility across Avantech Ltd.
Through our Information Security Management System Policy, we are committed to protecting information assets, managing security risks responsibly and embedding security into our people, processes and technologies.
As we continue our ISO/IEC 27001 journey, we remain focused on delivering secure, reliable and trusted services while continuously improving our Information Security Management System.
