Information Security Statement

As part of our mission, Vaxa necessarily handles privileged information on behalf of our clients, partners and personnel.

The information we hold needs to be treated with care and respect regardless of its physical or electronic format–it’s our ethical duty.

Vaxa also has legislative, moral and contractual responsibilities to ensure that we protect all information adequately. By designing for security, establishing strong policy frameworks, and providing training, we can help protect the information we handle against the ever-growing landscape of information security threats.

The security controls implemented to safeguard the information should mitigate threats to prevent harm from coming to those we are assisting and ensure we can continue to provide first-class services. We should strive to implement security controls that appropriately safeguard information, but with respect to the impact it has on our operations.

Vaxa has committed to series of policies that guide organisation-wide decision making when it comes to operating at highest standards when securing information. They will also help demonstrate to our clients that we operate with integrity and accept that we are accountable for protecting the information entrusted.

Above all else, we build on the following fundamental security principles:

• Confidentiality: Protecting information from unauthorised disclosure.
• Integrity: Protecting information from unauthorised or erroneous modification.
• Availability: Ensuring that information and associated services are available when and where required to meet the Vaxa’s service needs.

Our policies apply equally to all personnel (staff or contractor) accessing information or our information processing systems. Vaxa commits to ensuring all personnel are issued with the appropriate policies (namely, via the Handbook), can access them easily and understand the importance of adhering to them. Vaxa commits to plain language and clear communication across all that it does.

Vaxa also commits to reviewing and updating our policies to meet the changing external landscape and our internal requirements.

Have questions? Please reach out to the ISG Group.

Written and adopted by:

• Todd Crowley - Managing Director
• Curtis West - Director and CTO