Information Security Policy Statement

Australian National Character Check (ANCC) is an ISO27001 certified company. ISO/IEC 27001 certification is a globally recognised standard for information security management systems (ISMS), certifying that an organisation manages risk, protects data confidentiality, integrity, and availability. ANCC's information security management systems are regularly audited by independent and accredited ISO certifiers.

We have implemented, maintained, and continuously improve a formal Information Security Management System, in line with the requirements of ISO 27001:2023 and applicable sections of the Department of Home Affairs' Protective Security Policy Framework (PSPF).

This system ensures the protection of the confidentiality, integrity, and availability of information processed and stored concerning our customers and business partners.

Our information assets appear in various forms. These include data printed or written on paper, stored electronically or transmitted electronically. Our information management practices also cover personal data protection.

We proactively identify potential security risks and implement robust measures to mitigate these risks, thereby upholding the trust that our customers and stakeholders place in us to safeguard their information, as required by Australian law.

Committed to adaptation, ANCC strives to evolve our policies and procedures in response to new technologies, the needs of our clients, and our social and legal responsibilities.

This policy statement is communicated to all employees and is made available on ANCC's website.

This policy is approved and endorsed by the Managing Director of ANCC. The Chief Information Security Officer holds overall responsibility for maintaining this policy and guiding its implementation. Managers in ANCC have direct accountability to ensure that policies and procedures are implemented effectively within their respective areas of operation.

It is the duty of each employee to comply with ANCC's Information Security Policy, Privacy Management Plan and Information Security Management System policies and procedures set forth by Australian National Character Check Pty Ltd.