Valuepay Information Security Management System (ISMS)

ValuePay is a powerful payment solution system empowering the African market, people and businesses to thrive. We achieve this through a customer-first approach, driven by superior technology, and powered by innovation. We believe that if convincing your customers to buy your products and services is difficult, getting them to pay you should be easier.

Our major goal is to power the African market, and help it to compete in the global business environment. As long as you have a product or service to sell, Valuepay is what
you are looking for. We not only empower the customer, we provide the avenue for them to add real value to the society. To ensure the preservation of the confidentiality, integrity and availability of our information assets at all times, the organization has implemented an Information Security Management System (ISMS). The ISMS is designed to safeguard the sensitive data entrusted to us, mitigate risks, and continuously improve our information security posture.

Scope
This policy applies to all Value Payment Solution Limited employees, top management, vendors, and third-party service providers. It covers all information assets, including
customer data, financial information, and all processes covered under the scope of the ISMS.

ISMS Objectives
1. To protect 100% of customers/stakeholders' confidential information.
2. Ensure 100% Compliance with Value Payment Solution Ltd Contractual, Regulatory and Legal Requirements and reduce regulatory sanctions/penalties.
3. Increase staff-wide awareness about information security by up to 90%

ISMS Policy
The Management of Value Payment Solution Limited recognizes the importance of developing and implementing an Information Security Management System (ISMS). It
considers the security of information and related assets as fundamental for successful business operations. This will be demonstrated by:

• The provision of appropriate resources to establish and develop the ISMS.
• The confidentiality of information is protected and prevents unauthorized access and disclosure of sensitive information
• The integrity of information is maintained to ensure its accuracy and completeness
• The availability of information is maintained to meet business needs and to allow our clients access essential services without disruption.
• Business continuity plans are developed, maintained, and tested
• Information security awareness is shared with all employees
• An incident management process is established and implemented to ensure that all breaches of information security, actual or suspected are reported and investigated
• Information security risks are accessed, managed and mitigated to protect the organization and clients from evolving threats
• All legal, regulatory and contractual requirements related to Value Payment Solution Limited are met.

The information security management system is continually improved
All stakeholders are responsible for the implementation of respective security
policies and procedures within their area of operation and oversee adherence by their team members

This policy is reviewed at least annually or following significant changes or incidents.
Employees, suppliers, or other stakeholders who observe any deviations from the guidelines of this Policy may report the fact to the ISMS Manager via - email at
[pius@valuepay.ng] and may identify themselves or not.