Legal
Information Security Policy
At NaijaSpora, protecting information is essential for our business, customers, and partners. We are fully committed to safeguarding sensitive information in compliance with all relevant laws and regulations.
To support reliable, uninterrupted service, we've implemented an Information Security Management System (ISMS) aligned with ISO/IEC 27001 standards. This system is core to NaijaSpora’s commitment to operational excellence, designed to ensure the confidentiality, integrity, and availability of information across our organization.
Our Commitment:
- Setting clear ISMS objectives and dedicating resources to achieve them.
- Complying with all legal and regulatory requirements, including ISO 27001:2022.
- Protecting critical assets to prevent disruptions and protect stakeholder trust.
- Providing robust security training to all employees to foster awareness and compliance.
- Continuously updating and strengthening our ISMS to maintain ISO 27001 certification and meet evolving standards.
- Regularly reviewing policies and procedures to ensure effectiveness and relevance.
- Using a proactive risk management framework to identify and mitigate information security risks.
EMPLOYEE AND PARTNER RESPONSIBILITIES
NaijaSpora ensures that all employees, contractors, and relevant partners:
- Are well-informed and trained on our security practices.
- Understand their responsibilities for maintaining information security.
- Adhere to policies and procedures designed to protect sensitive information.
POLICY ACCESSIBILITY
Our Information Security policies are made accessible to employees, contractors, and stakeholders as necessary. This ensures transparency and facilitates compliance across the organization.
CONTINUOUS REVIEW
NaijaSpora reviews this policy regularly to remain responsive to:
- Changes in regulatory requirements.
- Evolving business needs.
- Emerging threats and vulnerabilities.
This proactive approach ensures our ISMS and overall security posture remain robust and effective.