Information security during disruption Policy

Document ID ACPL-ISMS-C5.29
Document Classification Internal
Issue Date (effective from) 01.12.2023
Version No 1.0
Latest Review Date 01.12.2023

Nitin Gupta Kunal Parikh Vijay Gupta

CISO Director Director

Prepared By Reviewed By Approved By

 Information security during disruption Policy

1. Control statement:

The organization should plan how to maintain information security at an appropriate level during
disruption.

2. Purpose:

To protect information and other associated assets during disruption.

3. Scope:

This policy covers the Plans to be developed, implemented, tested, reviewed and evaluated to
maintain or restore the security of information of critical business processes following interruption or
failure. Security of information should be restored at the required level and in the required time
frames.

4. Procedure:

The organization has implement and maintained:

a) Information security controls, supporting systems and tools within business continuity and ICT
continuity plans;

b) Processes to maintain existing information security controls during disruption;

c) Compensating controls for information security controls that cannot be maintained during
disruption

d) The business continuity and ICT continuity plan have been developed in order to take care of the
interruptions.

5. References:

1. Business Impact Analysis: Doc.5.29-F-01

Doc ID: ACPL-ISMS-C5.29 Version 1.0 Last Rev. Date: 01.12.2023 Page 2 of 3

This document is confidential and must not be shared or copied without written permission from
Aethereus Consulting. Please return or destroy upon request.
 Information security during disruption Policy

6. Revision History

Revision Date Description Author

1.0 01.12.2023 Initial release CISO

Doc ID: ACPL-ISMS-C5.29 Version 1.0 Last Rev. Date: 01.12.2023 Page 3 of 3

This document is confidential and must not be shared or copied without written permission from
Aethereus Consulting. Please return or destroy upon request.