International standards used in our policies
We use the following standards and guidance as references when developing our policies.
Privacy management
Guidance on managing personal data, assigning responsibility, and handling requests from the people whose data we hold.
Information security
References for managing information security and responding to incidents, including NIST SP 800-61 Rev. 3.
Business continuity
References for assessing disruptions, planning recovery, and testing those plans. Our BCP also refers to ISO/TS 22317 and ISO/IEC 27031.
Occupational safety
Guidance on workplace hazards, staff involvement in safety, and risks such as fatigue, violence, and work-related stress.
Financial integrity
A reference for assessing financial-crime risks. Our legal duties come from Philippine law and applicable client agreements.
Emissions reporting
A reference for measuring emissions, including purchased energy under Scope 2 and a phased review of relevant Scope 3 sources.