Information Security Policy

In line with the implementation of its Information Security Management System (ISMS), C Inspire Company Limited hereby announces the following Information Security Policy (ISMS Policy):

ISMS Implementation

The Company is committed to establishing, managing and continually improving its Information Security Management System (ISMS) in accordance with the requirements of ISO/IEC 27001, to strengthen security controls and build confidence among customers and stakeholders.

Information Protection and Risk Management

The Company is committed to safeguarding information by reducing risks and preventing incidents that could affect the data of customers and personnel at every stage of designing, developing and delivering software and hardware services, and by managing risks systematically to keep them at an acceptable level.

Legal and Regulatory Compliance

The Company strictly complies with applicable laws, standards and information security requirements, including the Personal Data Protection Act (PDPA), as well as requirements from customers and contractual partners.

Confidentiality, Integrity and Availability (CIA Principles)

The Company is committed to protecting customer information and internal information in line with the principles of Confidentiality, Integrity and Availability, ensuring that all types of information are stored, used and protected appropriately under its security measures.

Resources to Support the ISMS

The Company provides the necessary resources, including people, tools, technology, training and budget, so that its information security activities and ISMS remain effective and continually improve.

Security Awareness and Responsibility

The Company encourages employees and relevant parties at all levels to be aware of and responsible for information security, to strictly follow policies, procedures and security measures, and to participate in regular security training.

Information Security Incident Response

The Company maintains an incident management process so that security incidents can be promptly detected, reported, analysed and responded to, minimising their impact and preventing recurrence.

Policy Review and Improvement

Management reviews the effectiveness of the ISMS and this Information Security Policy at least once a year, or whenever significant changes occur, to ensure the policy remains appropriate and up to date.