Information Security Policy

To secure its competitive advantage and achieve its strategic goals, Sel treats its information assets, including consumer information assets, as highly valuable and ensures that they operate without interruption, securely and consistently.

In line with the requirements of the ISO 27001 standard for our Information Security Management System (ISMS), we accept and commit, as an integral part of our business, to:

• Documenting the system, protecting our information assets and continually improving its effectiveness;
• Prioritising the information security of all our stakeholders, including employees, suppliers, customers and local communities, and continually developing and improving in this area;
• Defining up-to-date roles, responsibilities and authorities for running the ISMS, and keeping our core and supporting business activities running without interruption;
• Ensuring that information is accessible only to authorised people and that duties are segregated;
• Providing the resources needed to implement, maintain and improve the ISMS;
• Maintaining the three core elements of information security in all our activities;
• Identifying risks to our information assets and managing them systematically;
• Addressing the factors that contribute to climate change and the risks that climate change poses to information security;
• Treating the information and data of our employees and all critical stakeholders as critical, and complying with all legislation on information security;
• Following technological developments in information security closely and, recognising the importance of training, giving all our employees the ISMS training they need;
• Managing our activities that support the human resources required for the ISMS together with our other management systems;
• Ensuring that information security breaches, or suspected breaches, are reported to and investigated by the disciplinary committee, protecting against unauthorised people who may try to compromise the integrity of information, and so preventing situations that could damage the trust and reputation of our company.

The three core elements of information security are:

• Confidentiality: information is accessible only to authorised people.
• Integrity: information is protected against unauthorised changes, and any change is detected.
• Availability: information is available to authorised users whenever they need it.

Implementing this policy is a reflection of SEL's commitment. We expect all employees and stakeholders to act with the same care.

If any breach of information security is identified, we commit to launching effective and comprehensive response processes without delay and to continually reviewing and strengthening our improvement mechanisms to prevent a recurrence, and we work resolutely to uphold these principles in full.