> For the complete documentation index, see [llms.txt](https://docs.glesys.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.glesys.com/security/annex-information-security/2.-information-system-security.md).

# 2. Information System Security

2.1 confidentiality, integrity, and availability of information systems and supporting infrastructure in accordance with the Cyber Security Rules. The strategy sets out Glesys’ approach to managing the security of its network and information systems, including but not limited to:

a) defined roles and responsibilities across the organization, including security manager, system owners, information owners, and technical experts;

b) system inventory and classification, ensuring systems are registered and managed in a centralized system with assigned ownership, criticality and information classification;

c) a company-wide security policy establishing principles and objectives, including proactive defence, resilience, and continuous improvement; and

d) version-controlled and approved policies and guidelines.

2.2 Glesys reviews its security frameworks regularly in accordance with the Cyber Security Rules. Glesys updates its frameworks as necessary and appropriate based on the findings of such reviews.