Information Security Policy Statement

Our commitment

Thirty One Concept LLC is committed to comply with all applicable laws, standards, codes, client’s needs, expectations, and relevant requirements to achieve high standards of information security. Our processes are structured into a documented Information Security Management System, which meets the requirements for the ISO/IEC 27001:2022 International Standard.

Principles of information security

Thirty One Concept LLC identifies information as a critical asset. The basic principles of our company, which attaches great importance to information security, are to:

• provide services by taking into account the efforts to comply with all legal regulations and contracts related to information security;
• implement a sustainable information security system based on risk assessment and management;
• ensure the integrity, confidentiality and availability of information assets and continuously improve them in a way that fulfils the requirements of the information security management system standard;
• carry out training and awareness activities to increase information security awareness;
• do business by taking into account information security obligations in the processes of receiving and providing services and products with customers and other stakeholders.

Legal requirements

We will commit to comply with all legal requirements applicable to our scope of work. Despite the official requirements set by the legal and regulatory authorities in Azerbaijan, we see these as the minimum requirements and we may choose to apply stricter compliance requirements where we see additional benefits, such as reduction of risks and client property damage.

Management of risks

Thirty One Concept LLC provides risk-based management to ensure that all risks related to information security, which may directly or indirectly affect the activities of our organization, will be assessed, available hazards identified and effective control measures applied.

Continuous improvement

We will promote the continuous improvement of the Information Security Management System through the implementation of best practices and the visible leadership, commitment and involvement of line management and employees’ participation.

Objectives and targets

We will identify the objectives for information-security-related issues and set the targets to achieve them for each year of operations, which will be reviewed on an annual basis by senior management. Training employees will be an integral part of the strategy to achieve the objectives.

Resources

All necessary resources such as intellectual, financial, informational, assets and others will be provided by company management to achieve planned objectives and targets.

Interested parties

The information security of company staff and our clients, suppliers and other interested parties is most important to us. We will take all applicable measures to ensure information security for employees and related persons.

External and internal issues

Any issues that could influence the purpose and the strategic direction of the organization, such as changes in regulations, increased competition, new market requirements, new expectations of interested parties, staff morale and new information security requirements, will always be considered.

Responsibilities

It is the duty of each employee to comply with the requirements of this information security policy and to cooperate with management to ensure that the system is as safe as possible. Employees shall report to management any concerns which may have affected the information security of our operations. The Chief Executive Officer (CEO) has overall responsibility for information security within the company and monitors the effectiveness of this policy. All employees carrying out their activities within Thirty One Concept LLC are obliged to implement these policy principles.

Communication

The Information Security Policy principles will always be communicated and available to staff. To involve our customers and any interested parties with a legitimate interest in our business, this Policy Statement is made available on our website.