Information Security Policy Statement

MASS Analytics is committed to safeguarding its information assets and ensuring the confidentiality, integrity, and availability of its information systems at all times. This commitment enhances trust, reliability, and confidence of all stakeholders, including end users, suppliers, and customers.

Against this backdrop, MASS Analytics has decided to implement, maintain, and certify an Information Security Management System (ISMS) in compliance with the ISO 27001:2013 standard. As part of the ISMS plan, MASS Analytics has established an Information Security Policy aiming to reach the following key objectives:

• Comply with all applicable laws, regulations, and contractual obligations associated with information security and privacy.
• Ensure confidentiality, integrity, and availability of the information assets.
• Ensure privacy and protection of personally identifiable information.
• Ensure traceability of information security events.
• Anticipate and prevent cyberattacks / cyberincidents.
• Ensure the cyber-resiliency of the information system.
• Establish and maintain a risk management process that detects, evaluates, and treats information security risks.
• Ensure that MASS Analytics Information System users understand their roles and responsibilities and demonstrate the necessary knowledge to protect MASS Analytics information assets.

The Information Security Policy covers all the resources (physical, hardware, software, and organizational) necessary for the production, processing, storage, transfer, presentation, or destruction of information.

In this context, MASS Analytics Top Management commits to:

• Implement the necessary security controls for the establishment and maintenance of its ISMS according to the ISO 27001 standard, as well as relevant legislations and regulations.
• Promote information security among all relevant stakeholders.
• Ensure that the ISMS meets the security requirements of various stakeholders.
• Ensure the sustainability of the ISMS through the implementation of a continuous improvement process.

I, the undersigned, Firas Jabloun, in my capacity as Chief Executive Officer of MASS Analytics, commit to providing my support and all necessary resources for the implementation and maintenance of the ISMS.

Furthermore, it is crucial for all stakeholders of MASS Analytics to adhere to the policies, rules, and principles governing MASS Analytics information security.