Information security policy

This document sets out the information security policy for Redstone PLC. All managers must read the policy and make their staff aware of how it affects them and the duty of care it imposes upon every employee.

Information is vital to Redstone and our customers businesses; the policy describes Redstone’s commitment to the protection of all information. Adherence to this policy is not optional and every endeavour must be made on behalf of the company to ensure that information is protected.

• The Directors and Managers responsible for Redstone’s service delivery recognise the need to protect the company’s information assets and those of its customers, to which it has access. They are fully committed to the adoption, implementation and maintenance of the organisations Information Security Management System (ISMS).
• Employees within Redstone have significant influence upon information security both within Redstone and within customer organisations and shall act in accordance with the organisations policies & procedures as well as applicable law and international standards.
• The scope and depth of this information security policy will be reviewed annually by the quality team, unless there is a significant change in the company’s business, which would cause an earlier review to be appropriate.
• Accreditation to BS ISO/IEC 27001 shall be maintained and implemented in the true spirit of the standard.
• The company will strive for continual improvement of its services inline with customer requirements, British and International standards and legislation.

The policy is applicable to all information held within Redstone. Much of this information is held on computer systems and networks operated by or on behalf of Redstone. All such systems are covered by this policy. Its purpose is to support the welfare of the Company, its staff and, where applicable, its customers and suppliers by protecting the confidentiality, integrity and availability of information held.

The Board of Redstone PLC fully endorses the policy and is committed to supporting its implementation throughout.

Frank Philbin

Managing Director
2011