We have appointed an Information Security Officer and have defined and published our basic security policy.
This policy is communicated to all our employees as an internal regulation, and is published on our website for service users as a Security Policy.