ISMS Policy

The Information Security Management System policy statement is outlined as follows:

  1. Information is a primary asset in the operational processes at PT Aset Kripto Internasional. Therefore, the confidentiality, integrity, and availability of information must be managed in such a way that its security is maintained.

  2. The implementation of the Information Security Management System at PT Aset Kripto Internasional refers to the ISO/IEC 27001:2022 standard.

  3. Top Management of PT Aset Kripto Internasional continuously demonstrates leadership and commitment to implementing an Information Security Management System in accordance with regulatory requirements applicable to PT Aset Kripto Internasional's business processes.

  4. Information security policies must be communicated to all employees and relevant third parties through available communication media so that they are easily understood and complied with.

  5. PT Aset Kripto Internasional will always strive to increase awareness, knowledge, and skills regarding information security for both internal employees and relevant external parties.

  6. The company conducts assessments and manages risks related to information security based on existing vulnerabilities and threats to each asset and process.

  7. In order to maintain the company's integrity, all PT Aset Kripto Internasional personnel are prohibited from engaging in any form of money laundering activities and are advised to report any suspicious actions related to this to the ISMS Head or members of the ISMS Team.

  8. If there are vulnerabilities and threats that have the potential to compromise information security, all interested parties are required to report them to the ISMS Head or members of the ISMS Team.

  9. All leaders at all levels are responsible for monitoring and evaluating the effectiveness of the implementation of this policy across all work units/departments under their supervision.

  10. All employees are responsible for maintaining and protecting the security of information assets and complying with established information security policies and procedures.

  11. Any violation of this policy and other related policies will be subject to administrative sanctions, such as revocation of information access rights and disciplinary action in accordance with applicable regulations.

  12. More technical policies and procedures will be prepared separately and established by referencing the principles specified in this policy statement.More technical policies and procedures will be prepared separately and established by referencing the principles specified in this policy statement.

  13. PT Aset Kripto Internasional is committed to continuous improvement in the implementation of the ISMS to achieve suitability, adequacy, and effectiveness of the ISMS.

  14. The ISMS policy statement is reviewed periodically at least once every 1 (one) year or whenever significant changes occur.