Information Security Policy

Information Security is a fundamental Navarino’s priority and for that reason an Information Security Management System has been implemented in order to:

• Ensure confidentiality, integrity, and availability of company’s information, in accordance with its scope.
• Ensure company’s compliance with legal, regulatory, contractual, and customer requirements.
• Protect Navarino’s interests and the interests of those who work with Navarino.
• Maintain and maximize the reliability of its informational assets.
• Achieve the corporate business objectives that has been set by the company with maximum security.

For the proper operation and the control of the ISMS distinct roles and responsibilities are assigned to Navarino’s employees. The most significant role is the role of Information Security Officer. The Information Security Officer is responsible for controlling and monitoring the operation of the Information Security Management System. Furthermore, he is responsible to communicate the Information Security Policy to the employees. However, information security and following the ISMS requirements is a responsibility of all employees of Navarino.

For that specific reason, the company undertakes to inform all personnel and its collaborators relating with the information security requirements and the ISMS procedures and policies.
Navarino classifies, stores and process its data with a safe way in accordance with the procedures of the Information Security Management System.

The company in order to maintain Information Security level conducts in planned periods internal audits (technical and procedural), paired with the Risk Assessment process, the company identifies and evaluates threats and vulnerabilities and with the Risk Treatment process selects the measures to mitigate the risks arising from the Risk Assessment results.

Navarino has established controls (technical and procedural) in order to identify security events and incidents, evaluate them and treat them according to its criticality. The information security measures that are taken and will be taken in the future in accordance with the company’s requirements aim to the continual improvement of the Information Security Management System.

The entire personnel of Navarino is responsible for the conformity with the Information Security Management System depends on its duties. Top Management and the entire personnel of Navarino are committed to satisfy company’s objectives and requirements related to Information Security.

Dimitrios Tsikopoulos
CEO