Differences

This shows you the differences between two versions of the page.

--- pub:trust_center:isms_policy [21.07.2026 13:27] – Information Security Management System Policy - Public commitment Predrag Tasevski
+++ pub:trust_center:isms_policy [21.07.2026 13:55] (current) – [Regulatory Compliance] Predrag Tasevski
@@ Line 48: / Line 48: @@
 === Risk-Based Approach ===
-We identify, assess, and manage information security risks using international best practices. Risks are prioritized by impact and likelihood; we focus resources on the most serious threats.
+We identify, assess, and manage information security risks using international best practices. See [[pub:trust_center:risk_framework|Risk Assessment Framework]] for our methodology.
+Risks are prioritized by impact and likelihood; we focus resources on the most serious threats.
 === Shared Responsibility ===
@@ Line 57: / Line 59: @@
   * **Leadership:** Allocate resources for security; review metrics regularly
   * **Management:** Ensure controls are working; investigate incidents
+See [[pub:company:accountability_chart|Accountability Chart]] for security roles and responsibilities.
 === Continuous Improvement ===
@@ Line 68: / Line 72: @@
 ====== Responsibilities ======
-| Role | Responsibility |
+^ Role ^ Responsibility ^
-|---|---|
 | **CEO / ISMS Sponsor (Predrag)** | Approve and support security policy; allocate resources; review metrics quarterly |
 | **CTO / Technical Lead (Peter)** | Implement technical security controls; manage vulnerabilities; respond to security incidents |
@@ Line 79: / Line 82: @@
 This ISMS policy helps Unicis comply with:
-| Regulation | How ISMS Supports It |
+^ Regulation ^ How ISMS Supports It ^ Related Document ^
-|---|---|
+| **GDPR (EU 2016/679)** | Article 32 (technical & organizational measures); Article 33 (incident notification) | [[pub:trust_center:policies:privacy_policy|Privacy Policy]] |
-| **GDPR (EU 2016/679)** | Article 32 (technical & organizational measures); Article 33 (incident notification) |
+| **NIS2 (EU 2022/2555)** | Article 21 (cybersecurity measures); Article 23 (incident reporting) | [[pub:trust_center:nis2_scope_determination|NIS2 Scope]] |
-| **NIS2 (EU 2022/2555)** | Article 21 (cybersecurity measures); Article 23 (incident reporting) |
+| **CRA (EU 2023/1230)** | Security updates; incident management; product security | [[pub:trust_center:cra_scope_determination|CRA Scope]] |
-| **CRA (EU 2023/1230)** | Security updates; incident management; product security |
+| **DORA (EU 2023/2164)** | Operational resilience; risk management; third-party risk | [[pub:trust_center:subprocessors|Trusted Subprocessors]] |
-| **DORA (EU 2023/2164)** | Operational resilience; risk management; third-party risk |
-See [[pub:trust_center:nis2_scope_determination|NIS2 Scope]] and [[pub:trust_center:cra_scope_determination|CRA Scope]] for Unicis-specific compliance obligations.
+====== Related Policies & Standards ======
+  * [[pub:trust_center:iso_27001_overview|ISO 27001:2022 Overview]] — Information Security Management System
+  * [[pub:trust_center:policies:it_security_policy|IT Security Policy]] — Detailed security procedures
+  * [[pub:trust_center:risk_framework|Risk Assessment Framework]] — How we manage security risks
+  * [[pub:trust_center:controls|Security Controls]] — Technical measures we implement
+  * [[pub:trust_center:iso_20000_1_overview|ISO 20000-1:2018]] — Service Management (parallel program)
 ====== Questions About Security? ======
-Have questions about Unicis security or compliance?
+Have questions about our security commitments or compliance?
 → Email us: **security@unicis.tech**
+----
+==== Navigation ====
+← [[pub:trust_center|Trust Center]] | [[pub:trust_center:iso_27001_overview|ISO 27001:2022 →]]
 ----