1. Commitment

SONO protects information entrusted to it through proportionate controls, legal and contractual compliance, assigned accountability and continual improvement.

2. Principles

• Confidentiality, integrity and availability
• Risk-based selection and review of controls
• Least privilege and need-to-know access
• Secure development and supplier oversight
• Incident readiness and business continuity
• Awareness, accountability and continual improvement

3. Responsibilities

All personnel and relevant suppliers must comply with approved security requirements and promptly report suspected incidents or weaknesses.

4. Review

Management reviews this policy periodically and after material legal, operational, technological or risk changes.