Information Security and Cybersecurity Policy

Information, an essential asset at the heart of the CIS Group’s activities, is today a potential target for cyber attacks. This is due to the professionalisation, evolution and constant improvement in the capabilities of malicious actors over the last few years.

The CIS Group has therefore decided to set up an Information Security Management System (ISMS) at the Group’s Head Office, in compliance with the ISO 27001 standard and the Personal Data Protection Policy.

The CIS Group’s Top Management is and will remain strongly involved and committed to this process of improving information security.

All CIS Group employees are invited to attend awareness and training sessions on the CIS Group ISMS, during which the various security plans are presented.

CIS Group managers shall ensure that their teams are involved and that they allocate the time and resources needed to meet information security objectives.

The objectives of implementing the ISMS are to:

• ensure the continuity of the CIS Group’s activities;

• prevent the leakage of sensitive information;

• reinforce the confidence of Group employees in the use of the resources made available to them.

The scope chosen for the ISMS, the organisation of governance, and the approach for specifically addressing information security issues and positioning ourselves within a framework of continuous improvement in information systems security are described in the Plan de Gouvernance de la Sécurité des Systèmes d’Information (PGSSI).

Our professionalism, mutual goodwill and determination enables us to tackle these issues together.

Yannick Morillon, CEO