OUR SECURITY COMMITMENT

The CJC information security policy, endorsed by the CJC Board of Directors, aligns with the ISO 27001 framework and certification. This policy mandates the security principles that apply to our people, process, and internal and external technology. The policy and supporting standards are reviewed and updated in response to evolving technical risks, regulatory changes, and client requirements for information security.

Security is at the forefront of what CJC does. As a result, we take a zero-trust approach to security, covering internal organisational structures and cloud environments.

CJC's information security management system (ISMS) protects our applications, platforms and infrastructure, safeguarding client data.

Data classifications are applied at CJC to ensure security protections are appropriate to the level of risk attached to the data, protecting and processing data on behalf of clients.

CJC utilises industry best practices and multi-layered security techniques delivered via unified security-management platforms.

PHYSICAL SECURITY

Our corporate security policy guidelines are based on industry best practices and comply with ISO 27001. As a global firm, CJC meets country or region-specific standards.

These guidelines include requirements for physical security, building maintenance, fire suppression, cooling, UPS with generator backup, and access to diverse power and communications.

CJC’s policy requires facilities used to deliver a part of a service, whether managed by CJC or a third party, to be subject to comprehensive audits.

CJC’s InfoSec program (including infrastructure, technical controls, processes, policies, and certifications) is periodically reviewed and updated in line with technical risks, regulatory changes and clients’ needs for information security.

With regions/zones available globally, CJC can provide clients with the flexibility to deploy applications as required with interconnectivity between regions across multiple regions/zones.

SECURITY MEASURE HIGHLIGHTS

As a company, CJC takes IT security seriously and prioritises the protection of client data. Some of CJC's IT security highlights:

• - Dedicated cybersecurity team.
• - Zero-trust infrastructure.
• - Zero-trust network tiers.
• - Multi-factor authentication.
• - Strict firewall and network access controls.
• - Network intrusion detection.
• - Web-filtering appliances.
• - Active directory and AD auditing.
• - Windows file system auditing.
• - BYOD management.
• - Penetration testing.
• - Continuous monitoring of cyber threats.
• - Administration credential encryption.
• - Network intrusion detection.
• - Security change request controls.
• - Private network access control.

CJC continually invests in multiple security and compliance products to enhance security. CJC can provide comprehensive details of our IT security standards on request.