Information Security Policy Statement

Albourne Partners Limited together with its subsidiaries and affiliated companies (“Albourne”) strives to deliver a consistently high level of information security throughout the Albourne group.

Albourne’s Board of Directors and Managers is committed to implementing and maintaining compliance with ISO/IEC27001:2013 standard and continuously improve its information security practices. This will help maintain Albourne’s reputation in the financial industry and meet its legal/regulatory, clients’ and fund managers’ requirements.

Albourne commits to:

• understanding clearly the requirements and expectations of its stakeholders, both internal and external, including the relevant regulatory authorities;
• working closely with its clients, suppliers and fund managers to deliver services in a security conscious manner;
• ensuring every employee shares responsibility for effective information security;
• protecting its employees, information, intellectual property, assets, activities and facilities against misuse, loss, damage, disruption, interference, or unauthorised disclosure. It is also critical that Albourne retains the confidence of those who entrust confidential information to Albourne;
• developing and maintaining security policies and controls designed to meet the requirements of ISO/IEC27001:2013. Albourne’s Information Security policies, procedures, guidelines, and standards, reflect the minimum requirements necessary to maintain an acceptable standard for protecting Albourne’s information assets and, at the same time, Albourne’s reputation; and
• implementing an Information Security Management System (“ISMS”) and ensure it is maintained, continually improved, and supported with adequate resources to achieve the objectives set in this Policy Statement.

Albourne’s approach to achieving these objectives is to enhance information security through investment in technology, processes, and employee information security awareness training. This will improve the way Albourne manages its business and deliver services to its clients. Underpinning Albourne’s approach to information security is the Group Risk Management Framework which allows the business to present threats, risks, and opportunities for management review. It enables Albourne’s Board of Directors and Managers to ensure the risk profile of the business is accurate and that risk mitigation efforts are focused on appropriate strategic outcomes.

This policy statement is easily accessible to all Albourne employees through Albourne’s intranet. Employees are asked to take particular care in their approach to security and to accept the important role they play in maintaining an effective information security program throughout Albourne.