ملحق الأمن

This Schedule summarises the general security approach for the EMteja services. The controls actually applicable to a customer are those implemented for the relevant service and environment and described in the signed agreement or agreed security documentation.

1. Governance and risk

EMteja maintains security policies and risk-management practices appropriate to the services and reviews them as reasonably necessary.

2. Access control

Access to systems and data is restricted based on role and business need. Authentication, privileged access and access reviews are applied according to system capability and risk.

3. Data protection

Technical measures are used to protect data in transit and at rest where supported by the relevant system. Data access is restricted and logged where appropriate.

4. Infrastructure and segregation

Hosting, network protection and logical separation measures are applied according to the service architecture and customer configuration. Specific hosting regions and residency commitments must be confirmed in the applicable order or data-processing terms.

5. Monitoring and vulnerabilities

Security events and vulnerabilities are monitored and addressed according to risk and operational priorities. Testing frequency and scope depend on the applicable programme and service.

6. Development and change

Changes to production services are subject to controls intended to reduce security and operational risk.

7. Personnel and suppliers

Personnel with access to customer data are subject to appropriate confidentiality requirements. Relevant suppliers are assessed and governed according to their role and risk.

8. Continuity and incidents

Continuity, backup, recovery and incident-response arrangements are maintained according to the service design. Incident communications are handled under the applicable agreement and law.

9. Certifications and assurance

Any certification, audit report or assurance statement applies only to the entity, scope, locations and period stated in the relevant current certificate or report. Copies may be provided where available and subject to confidentiality.

This Schedule does not warrant that a security incident will never occur and does not replace customer-side security measures or responsibilities.

Contact: support@infocustechnologiesllcfz.com Infocus Technologies L.L.C-FZ (identified as EMteja) The Meydan Hotel, Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.

Website: https://emteja.com