SHAD-NAD recognizes the importance of security in handling information across the organization, including its suppliers, clients, users, and the entities and institutions it collaborates with. Accordingly, our Information Security Policy is designed to ensure the confidentiality, integrity, and availability of information. This policy provides a framework for establishing and evaluating Information Security Objectives through the following principles:

• Establishing an appropriate level of security and resilience aligned with the organization’s purpose, strategic objectives, and the needs of its stakeholders.
• Ensuring compliance with applicable legal, regulatory, and contractual requirements.
• Equipping the organization with procedures and tools for analysis, prevention, detection, response, and recovery, enabling accurate and timely reactions to technological changes and minimizing exposure to incidents.
• Raising awareness among employees and stakeholders, as applicable, about information security risks, and providing them with the knowledge and skills necessary to protect the organization’s information systems.
• Promoting a proactive security culture, where all employees and collaborators are responsible for diligently reporting any information security incidents.
• Conducting continuous reviews to integrate the latest threats facing the organization, thereby improving adaptability and resilience.
• Ensuring a process of ongoing review and continuous improvement of the security management model to address potential threats that may impact the organization.