Information security policy

Last revised: 2025-7-18

The Information Security Policy (“IS Policy”) outlines the principles and practices applied to protect the data and systems managed by Cloudoora in the course of its operations. 

Focus of the IS Policy 

Cloudoora’s IS Policy is centered around ensuring the accessibility, authenticity, integrity, and confidentiality of information, in line with applicable laws and the ISO/IEC 27001:2017 standard — Information technology – Security techniques – Information security management systems – Requirements — within the scope of Cloudoora’s services and infrastructure. 

Implementation of the IS Policy 

Implementation is based on thorough risk assessment, addressing potential threats and vulnerabilities that may impact the security of data managed by Cloudoora. The policy guides the continuous improvement of our Information Security Management System (ISMS) to reduce such risks to an acceptable and manageable level. 

Goals of the IS Policy 

Cloudoora’s IS Policy is designed to achieve the following: 

• Protect confidential information and personal data from unauthorized access, use, or disclosure. 
• Ensure timely availability of information to authorized personnel for legitimate and approved use. 
• Maintain information that is sufficient and verifiable, including its origin, creator, and handler. 
• Prevent illegal alteration, destruction, or loss of data. 
• Ensure information is not intentionally or accidentally accessed by unauthorized individuals. 
• Provide ongoing training and clear guidance to internal users regarding information security best practices. 

This policy is implemented alongside Cloudoora’s cybersecurity and business continuity strategies. It is guided by the following principles: procedural clarity, functional separation, practical enforcement, resistance to social engineering, avoidance of security fatigue, proportionality, and a balance between security and operational efficiency.