Copia's Security Policy

Copia Consultancy Services is an IT services, consulting, and business solutions organization offering a consulting-led, cognitive-powered, integrated portfolio of business, technology, and engineering services and solutions delivered through its unique Location Independent Agile™ delivery model. As part of its operations, Copia has access to business-sensitive information (including personal information), the protection of which is crucial to Copia and its clients’ business interests.

Our Security Vision is “To make Copia reliable, resilient, and immune to the existing and evolving volatile environment of constant changes, accidents, attacks, and failures.”

This Security Policy reiterates our commitment to protect all the information and assets that we own or are responsible for; thus, ensuring an efficient, safe, and secure working environment for Copia and its customers. Copia will deploy a convergent security model to ensure:

• Protection of information and assets against unauthorized access by deploying adequate security controls covering physical, logical, and personnel security
• Compliance to legal and statutory / regulatory requirements across its global operations
• Continuity of operations in line with business requirements and obligations to its stakeholders
• Inclusion of security responsibilities of various departments / individuals to adhere to this Policy
• Adequate security awareness and competence among associates at all levels to fulfill these responsibilities
• Avenues for associates and other stakeholders to report security weaknesses, violations, or disruption of services
• A robust response framework to handle security weaknesses, violations, or disruption of services
• Governance of security performance against appropriate targets and objectives, enabling continuous improvements

This Policy will be supported by Standards, Procedures, and Guidelines (Security Management System) and will be made available to all stakeholders who are expected to contribute towards the effective implementation and deployment of these security norms. The Security Management System will be periodically reviewed to ensure its continuing applicability and relevance to our operations and evolving stakeholder expectations.

This Policy will extend to Copia globally and its wholly-owned subsidiaries in all geographies, and will be applicable to all its associates, business associates, and external parties having access and usage rights to its infrastructure, IT systems, and/or Information resources. Consequences arising out of violations or contravention to any of the objectives of this Policy will be equally applicable to all associates of Copia and its wholly-owned subsidiaries globally and external parties.