Quality and Information Security Policies

Quality Policy

It is the policy of our organization to:

1. Define and meet our customer’s requirements.
2. Ensure that our Policies and Procedures are clear and concise to reflect what we actually do.
3. Monitor and analyze performance metrics, making any necessary changes or adjustments to customer programs, customer satisfaction, the Quality Management System, and/or any related entities as appropriate.
4. Educate all employees about the linkages between their jobs and Customer satisfaction.
5. Ensure effective Customer and internal communication.
6. Foster a team approach to problem solving and preventive action by empowering all employees to be quality ambassadors.
7. Integrate organization’s Quality Management system into the Company’s culture and daily practices, establishing a long-term commitment to quality, continuous improvement, and customer satisfaction.
8. Meet and/or exceed our customer’s expectations through continuous improvement.
9. Guarantee that organization’s top management meets regularly with the Quality Management representative to review and ensure the effectiveness of the Quality Management System.

Information Security Policy

It is the commitment of our organization to:

1. Protect the confidentiality, integrity, and availability of information throughout its lifecycle, regardless of how it is created, processed, communicated, stored, transmitted, retained, or disposed of.
2. Protect PECB information and information systems against unauthorized access, disclosure, alteration, misuse, loss, destruction, or other security threats.
3. Ensure that information is accurate, complete, reliable, and available to authorized users when required.
4. Identify, assess, monitor, document, and appropriately treat information security risks in accordance with PECB’s risk-management approach.
5. Apply the principles of least privilege, need-to-know, segregation of duties, and security and privacy by design and by default.
6. Ensure that information security requirements are integrated into business processes, projects, systems, products, services, and relationships with relevant third parties.
7. Ensure that employees, contractors, consultants, vendors, and other relevant third parties understand and fulfill the information security responsibilities applicable to their roles.
8. Provide appropriate information security awareness and training and promote individual responsibility and accountability for protecting information.
9. Identify, report, assess, and respond effectively to information security events and incidents, including taking appropriate corrective actions where necessary.
10. Maintain appropriate business continuity, resilience, backup, recovery, and availability measures to support critical information and systems.
11. Comply with applicable legal, regulatory, contractual, data protection, and accreditation requirements and prevent activities that could place PECB in breach of such obligations.
12. Regularly review, monitor, and continually improve PECB’s Information Security Management System, controls, and practices to strengthen security, resilience, and trust.