Who we are
We are committed to safeguarding the confidentiality, integrity, and availability of our information assets. As an organization certified under ISO 27001:2022, we adhere to internationally recognized standards and best practices to ensure the security of our systems and data.
Commitment to Protect Confidentiality, Integrity, and Availability (CIA Triad)
The Information Security Policy explicitly commits to safeguarding the confidentiality, integrity, and availability of information assets. This is a core requirement of ISO 27001 Clause 5.2 and is directly reflected in their public description of certification: it “validates a rigorous approach to managing information security, ensuring confidentiality, integrity, and availability of data”. Foundation of their policy and aligns with their “Security-First Mindset” core value.
Top Management Leadership and Commitment
Senior management establishes, approves, and maintains the policy as part of demonstrating leadership (Clause 5.1 & 5.2). Insight Technology highlights this through consistent promotion of ISO 27001:2022 certification across the website (footer, About Us, industry pages like Banking & Finance), emphasizing top management’s role in a “rigorous approach” and providing resources for security. Their internal ISMS includes management responsibility for continual oversight.
Framework for Information Security Objectives
The policy provides a clear framework for setting and achieving security objectives, such as protecting sensitive data, ensuring system reliability, complying with regulations, and improving security posture. This is evident in their service delivery (e.g., 99% client satisfaction, 24/7 monitoring, threat neutralization) and client-facing commitments to “highest standards of quality and security,” which mirror internal objectives tied to the policy.
Legal, Regulatory, and Contractual Requirements
The policy includes a strong commitment to satisfy applicable requirements (e.g., Nepal laws like Electronic Transactions Act, PPMO procurement guidelines and international standards). Insight Technology demonstrates this by offering compliance support (IS audits, readiness assessments for ISO, CISO, PCI-DSS) and stating adherence to “internationally recognized standards and best practices.” Their certification audit verifies this commitment is embedded in the policy.
Improvement of the ISMS (Information Security Management System)
The policy mandates ongoing improvement of the Information Security Management System through reviews, assessments, and updates. This is actively shown in their “relentless pursuit of excellence,” managed services (e.g., threat hunting, incident response, SIEM), internal risk assessments, and surveillance audit compliance. Public emphasis on adapting to evolving threats and delivering scalable, resilient solutions reflects this continual improvement pledge.may be checked through an automated spam detection service.