ISMS Policy

As a modern, forward-looking business, Unity Bank recognizes at senior levels the need to ensure that its business operates smoothly and without interruption for the benefit of its customers, shareholders and other stakeholders.

It is therefore our policy to ensure that:

• The bank’s strategy and Information Security management framework provides the context for identifying, assessing, evaluating and controlling information-related risks through the establishment and maintenance of the Information Security Management System
• The Information Security risk assessment, Statement of Applicability and risk treatment plan identify how information- related risks are controlled.
• The establishment and maintenance of the ISMS shall be achieved by identifying, assessing, evaluating and controlling information-related risks, in alignment with Unity Bank’s risk management strategy.
• The establishment and maintenance of the ISMS shall be achieved by identifying, assessing, evaluating and controlling information-related risks, in alignment with Unity Bank’s risk management strategy.
• All employees of Unity Bank and all external parties that access Unity bank Infrastructure or data are expected to comply with this policy and with the security management system that implements this policy.
• All staff and certain external parties that access Unity bank Infrastructure or data will receive or be required to undergo appropriate training.

In order to drive continual improvement within the Information Security Management System, Unity Bank set objectives as part of the Management review process; these objectives ensure the system is appropriately monitored and measured. All objectives are communicated to all staff and include key responsibilities, timescales and appropriate measures of success.