Security & Compliance

Information Security Policy Statement

MASS Analytics is committed to safeguarding all its information assets against any loss of confidentiality, integrity, and availability that could impact our finances, operations, legal or contractual obligations, or reputation. 

To support this commitment, MASS Analytics will implement, maintain, and continuously improve the suitability, adequacy, and effectiveness of its Information Security Management System (ISMS) in alignment with the ISO/IEC 27001:2022 standard. 

Information Security Objectives

• Ensure confidentiality, integrity and availability of the information assets. 
• Ensure compliance with applicable laws, regulations and contractual requirements. 
• Implement a risk management framework to identify, assess, and mitigate information security risks effectively. 
• Promote information security awareness and competence among employees and stakeholders. 
• Incorporate security controls across the software development lifecycle to ensure secure products and services. 
• Ensure privacy and protection of personally identifiable information (PII), 
• Maintain traceability of information security events, 
• Anticipate and prevent cyberattacks and incidents, 
• Ensure cyber-resilience of the information systems, 
• Protect customer and internal data in accordance with contractual and regulatory requirements. 
• Ensure that information systems remain available to authorized users, minimizing operational disruptions 

Leadership and Continual Improvement 

MASS Analytics’ top management demonstrates leadership and commitment by: 

• Integrating information security into core business strategy and governance. 
• Supporting the allocation of appropriate resources. 
• Regularly reviewing the effectiveness of the ISMS and its objectives. 
• Promoting a culture of security and continual improvement.