Information Security Policy Statement

At Australian National Character Check Pty Ltd (ANCC), we have implemented, maintained, and continuously improve a formal Information Security Management System, in line with the requirements of ISO 27001:2023 and applicable sections of the Department of Home Affairs' Protective Security Policy Framework (PSPF).

This system ensures the protection of the confidentiality, integrity, and availability of information processed and stored concerning our customers and business partners.

Our information assets appear in various forms. These include data printed or written on paper, stored electronically or transmitted electronically. Our information management practices also cover personal data protection.

We proactively identify potential security risks and implement robust measures to mitigate these risks, thereby upholding the trust that our customers and stakeholders place in us to safeguard their information, as required by Australian law.

Committed to adaptation, ANCC strives to evolve our policies and procedures in response to new technologies, the needs of our clients, and our social and legal responsibilities.

This policy statement is communicated to all employees and is made available on ANCC's website.

This policy is approved and endorsed by the Managing Director of ANCC. The Chief Information Security Officer holds overall responsibility for maintaining this policy and guiding its implementation. Managers in ANCC have direct accountability to ensure that policies and procedures are implemented effectively within their respective areas of operation.

It is the duty of each employee to comply with ANCC's Information Security Policy, Privacy Management Plan and Information Security Management System policies and procedures set forth by Australian National Character Check Pty Ltd.