Information Security Management Policy

The management of “CORIS BULGARIA” Ltd., represented by the Managing Director, officially declares its Management Policy, which is communicated, understood, implemented, and maintained by all employees of the company.

The Management Policy is aimed at increasingly meeting the expectations of interested parties when providing services under insurance contracts to insured persons through a 24/7 customer service center for the purpose of handling insurance claims.

Each employee is personally responsible for maintaining information security. Management consciously works toward the improvement of the Information Security Management System (ISMS) and the enhancement of its effectiveness. As proof of our professionalism and to maintain a high reputation with our clients, we guarantee that:

• our services are based on modern technologies with a special emphasis on information security;
• we have created the necessary conditions to preserve the confidentiality, integrity, and availability of physical and electronic information assets;
• we ensure maximum transparency to clients regarding the way personal data is managed;
• there is unity of objectives, leadership, and internal environment;
• we periodically assess external and internal risks to the organization and take measures to minimize them;
• we systematically train employees and provide opportunities for development;
• we continuously improve and expand the services offered and the security of information;
• we comply with applicable regulatory documents and international specifications and standards, including EN ISO 9001:2015/A1:2024 and EN ISO/IEC 27001:2023/A1:2024.

The effectiveness, relevance, and suitability of the Integrated Management System are subject to regular internal audits conducted by qualified auditors and are monitored by external independent certification bodies.

We commit to:

• maintaining the Integrated Management System in compliance with the requirements of the international standards EN ISO 9001:2015/A1:2024 and EN ISO/IEC 27001:2023;
• providing the necessary means and resources for implementing the policy and achieving the established management objectives;
• conducting periodic reviews of the Integrated Management System to assess its adequacy and effectiveness;
• motivating staff to contribute to the achievement of the objectives.

We guarantee that, within the scope of the Integrated Management System, the Policy:

• is appropriate to the nature of the organization’s activities;
• includes a commitment to comply with applicable national regulations, international specifications, and standards related to information security;
• provides a framework for setting and reviewing general and specific objectives;
• is implemented and maintained;
• is communicated to personnel working for or on behalf of “CORIS BULGARIA” Ltd.;
• is available to interested parties where appropriate.