CAC International Bank

We have established this quality policy to be consistent with the purpose and context of our organisation. It provides a framework for setting and reviewing objectives in addition to our commitment to satisfying applicable customer, regulatory and legislative requirements and our commitment to improving our management system continually.

Customer focus: As an organisation, we have committed to understanding our current and future customers’ needs, meeting their requirements, and striving to exceed their expectations.

Leadership: Our Top Management has committed to creating and maintaining a working environment in which people become fully involved in achieving our objectives.

Engagement of people: As an organisation, we recognise that people are the essence of any good business and that their full involvement enables their abilities to be used for our benefit.

Process approach: As an organisation, we understand that a desired result is achieved more efficiently when activities and related resources are managed as a process or series of interconnected processes.

Improvement: We have committed to continually improving all aspects of our quality management system; it is one of our main annual objectives.

Evidence-based decision-making: As an organisation, we have committed to only making decisions relating to our QMS after analysing relevant data and information.

Relationship management: Top Management recognises that an organisation and its relationship with its external providers are interdependent, and a mutually beneficial relationship enhances the ability to create value.

Our policy is also to meet the requirements of other interested parties and meet our social, environmental, charitable, regulatory, and legislative responsibilities.

The Board of Directors of CAC International Bank understands the information security needs and expectations of its interested parties both within the bank and from external parties, including, amongst others, clients, suppliers, regulatory and governmental departments. The Company has recognised that the disciplines of confidentiality, integrity, and availability of information in Information Security Management are integral parts of its management function and view these as their primary responsibility and fundamental to best business practice. To this end, CAC International Bank has produced this Information Security Policy aligned to the requirements of ISO/IEC 27001:2022 to ensure that the Company:

• Comply with all applicable laws and regulations and contractual obligations.
• Implements Information Security Objectives that consider information security requirements following the results of applicable risk assessments.
• Communicates these Objectives and performance against them to all interested parties.
• Adopts an Information Security Management System comprising a Security Manual and Procedures, which provide direction and guidance on information security matters relating to employees, customers, suppliers, and other interested parties who encounter its work.
• Adopts a forward-thinking approach to future business decisions, including continually reviewing risk evaluation criteria, which may impact information security.
• Works closely with customers, business partners and suppliers to establish appropriate information security standards.
• Constantly strives to meet and, where possible, exceed customer expectations.
• Instruct all staff members on the needs and responsibilities of Information Security Management.
• Implements continual improvement initiatives, including risk assessment and risk treatment strategies, while using its management resources effectively to meet information security requirements better.

The Chief Executive Officer is responsible for upholding this policy company-wide and encourages the personal commitment of all staff to address information security as part of their skills.