As a software company doing both its own product development and working on customer projects that are classified as very high secure, Basemark has to take information security very seriously. All Basemark employees and other stakeholders are dealing with lot of secure digital information that needs to be protected and managed in a professional way. In both business areas Basemark-provided software or code might be used in vehicles, such as autonomous-driving cars, which means that the quality of our work has immediate influence security and safety.
It is critical for Basemark to protect the information assets from unauthorised access and compromise or disclose. At the same time, the information must be available in order to ensure the business goals and enable customer value. Basemark’s management and the board are committed to serve the confidentiality, integrity and availability of information within the company, its clients, subcontractors and other stakeholders. To make this possible, Basemark’s management is committed to provide the needed resources to maintain information security.
This policy applies for Basemark’s suppliers and partners, too.
Basemark’s information security policy is:
• To protect the trade secrets and intellectual property rights of Basemark, its customers and contractors
• To comply with relevant laws and regulations
• To avoid harm for Basemark’s customers, employees, owners or other stakeholders
• To ensure that employees and partners know the legal and contractual requirements in Basemark’s business environment and comply with them
• To maintain and develop good partnerships and avoid possible negative financial consequences
• To provide a framework for needed changes and continuous improvement
• To protect the individual privacy of our employees, clients and other partners and support them with timely information in case of data subject requests, any incidents and especially in case of suspected data breach
• To learn from incidents and security events
• To inform the employees about the policies and communicate their practical meaning to everyone
• To create and maintain awareness for the various aspects of information security, such as data security, privacy topics (GDPR) and physical security
• To follow the logic the Need-to-Know and Principle of Least Privilege to reduce security risks
• To motivate and encourage the employees to work and act in a secure way
• To take a non-compliance or breech conducted by an employee or contractor very seriously. In such case, the CEO will be consulted and he or she will decide on case-by-case basis what the consequences shall be. Target of such action shall be the recovery of the confidentiality, integrity and availability and / or to minimize the harm to Basemark’s customers, employees, owners or other stakeholders.
Basemark is committed to establish and improve a way of working that takes the major aspects of information security into account: Confidentiality and protection of information where needed, protection of the information integrity and ensuring the needed availability of information in a way that business processes aren’t unnecessarily interrupted and the quality of software development work remains state-of-the-art. This policy shall be reviewed annually and updated if necessary.
