Information Security Management Policy

The Information Security Management System (ISMS) is a cornerstone of Borea Shipping’ operations. Our mission is to ensure the integrity, confidentiality, and availability of all information we produce, manage, disseminate, or store. Our policy aims to safeguard our information assets from all internal, external, deliberate, or accidental threats. In support of this policy, we commit to:

• Uphold confidentiality: We treat all information, including internal, third-party, personal, and electronic data, with the utmost confidentiality.
• Maintain integrity: We strive to preserve the accuracy and completeness of all our information.
• Ensure availability: Our information systems, along with the data they contain, are designed to support our core and ancillary business operations reliably.
• Comply with regulations: We adhere to all applicable statutory and regulatory requirements.
• Protect information assets: We secure our information assets through effective business continuity management.
• Promote accessibility: We make information readily available to our staff and the public, minimizing any disruption.
• Enhance awareness: We elevate our staff’s understanding of information security management through targeted education and training.
• Implement reliable access control: We safeguard our information system against unauthorized access through robust access control measures.

Under this policy:

• Reporting and Investigation: All actual or suspected breaches of information security will be reported to and investigated by authorized personnel, including the System Administrator and Incident Investigator.
• Documentation: The Information Security Management Committee is tasked with documenting and maintaining the Information Security Management System.
• Accessibility: Documents related to Information Security, including Policies, Procedures, and Guidelines, will be made available in both hard copy and online via our intranet system to support the ISMS Policy.
• Implementation: All managers are responsible for implementing this policy within their departments, ensuring that every staff member adheres to it.

This policy has been approved by the Management Board and will be reviewed and, if necessary, revised annually to ensure it remains current and effective. It will be published on our company website. We welcome feedback from all interested parties on the policy’s enforcement and its content.