ATTPL HoldCo ENTERPRISE INFORMATION SECURITY POLICY

1. PURPOSE

To protect information assets from unauthorized access, disclosure, alteration and destruction.

2. SECURITY OBJECTIVES

• Confidentiality - Protect sensitive information.
• Integrity - Maintain accuracy and reliability.
• Availability - Ensure timely access to systems and data.

3. SECURITY CONTROLS

• Identity & Access Management
• Multi-Factor Authentication
• Encryption
• Vulnerability Management
• Security Monitoring
• Backup & Recovery
• Incident Response

4. USER RESPONSIBILITIES

• Users must:
• Protect credentials.
• Report incidents.
• Follow security requirements.

5. GOVERNANCE

• Security governance shall align with:
• ISO 27001
• NIST Cybersecurity Framework
• Global Security Best Practices

6. COMMITMENT

Security is fundamental to trust.