Information Security Management System (ISMS) – Policy

The scope of this policy relates to the use of the WorkBuzz platform and computer systems operated by WorkBuzz in pursuit of the company’s business of providing an employee feedback platform to their customers. They help companies build a great culture, make smarter people decisions and retain their best talent to improve employee engagement and workplace culture. The scope also relates where appropriate to external risk sources including functions which are outsourced mainly some development of the WorkBuzz platform through Codibly, a Polish software development company based in Krakow.

It is the policy of WorkBuzz to maintain an information management system designed to meet the requirements of ISO 27001 in pursuit of its primary objectives, the purpose and the context of the organisation.

It is the policy of WorkBuzz to:

• make the details of our policy known to all other interested parties including external where appropriate and determine the need for communication and by what methods relevant to the business management system
• comply with all legal requirements, codes of practice and all other requirements applicable to our activities; therefore, as a company, we are committed to satisfy applicable requirements related to information security and the continual improvement of the ISMS
• provide details of resources of equipment, trained and competent staff and any other requirements to enable these objectives to be met
• ensure that all employees are made aware of their individual obligations in respect of this information security policy
• maintain a management system that will achieve these objectives and seek continual improvement in the effectiveness and performance of our management system based on “risk”.

This information security policy provides a framework for setting, monitoring, reviewing and achieving our objectives, programmes and targets.

To ensure the company maintains its awareness for continuous improvement, the business management system is reviewed annually by the WorkBuzz Leadership team to ensure it remains appropriate and suitable to our business.  The Business Management System is subject to both internal and external annual audits.

Steve Frost, CEO at WorkBuzz