1. Introduction

At Sison Corillo Parone & Co., we are committed to protecting the confidentiality, integrity, and availability of our information assets. This Information Security Policy outlines our approach to managing information security, safeguarding sensitive data, and ensuring compliance with applicable laws and regulations.

2. Purpose

The purpose of this policy is to:

Define our information security objectives.
Establish a framework for managing information security risks.
Ensure that all employees, suppliers, and third parties understand their responsibilities regarding information security.

3. Scope

This policy applies to the firm’s executive managements and all of its employees, suppliers, and third-party service providers who have access to our information systems and data, including:

All electronic and paper-based information.
Software applications and IT systems.
Communication channels and networks.

4. Information Security Objectives

Our main information security objectives are to:

Protect sensitive and confidential information from unauthorized access and disclosure.
Ensure the integrity of data by preventing unauthorized modifications.
Maintain the availability of information and systems to authorized users when needed.

5. Roles and Responsibilities

Information Security Officer (ISO): The ISO oversees the implementation and maintenance of the Information Security Management System (ISMS). They develop, review, and update security policies, standards, and procedures, while also coordinating security awareness training and ensuring compliance with relevant regulations. Additionally, the ISO serves as the primary contact for security incidents and leads the response efforts to address these incidents.

Data Owners: Data owners are responsible for classifying data according to its sensitivity and criticality. They determine access levels and permissions for individuals or groups based on business needs and data classifications. Additionally, data owners regularly review access rights and permissions to ensure they align with business requirements and security policies.

System administrators: System administrators manage the daily operations of IT systems and infrastructure. They implement and maintain security controls, including access controls, firewalls, and intrusion detection systems. Additionally, they monitor system logs and audit trails for suspicious activities and security incidents, and they apply security patches and updates promptly to address vulnerabilities.

Employees: All employees must adhere to information security policies, standards, and procedures. They are responsible for safeguarding sensitive information and assets entrusted to them in their roles. Employees should promptly report any security incidents, breaches, or suspicious activities through the appropriate channels. Additionally, they are expected to participate in security awareness training and follow best practices for information security.

Human Resources (HR): HR is responsible for ensuring that employees receive sufficient security training and awareness. They manage the user access provisioning and de-provisioning processes according to established policies. Additionally, HR conducts background checks and enforces security policies related to employee conduct and compliance.

Legal and Compliance Team: The legal and compliance team ensures that information security policies and practices adhere to relevant laws, regulations, and industry standards. They provide guidance on legal and regulatory requirements related to data protection and privacy and assist in drafting contracts and agreements with third parties to safeguard sensitive information.

6. Risk Management

We will conduct regular risk assessments to identify and evaluate potential security risks to our information assets. Risk mitigation strategies will be implemented to address identified vulnerabilities.

7. Access Control

The Access Control Policy at Sison Corillo Parone & Co. is designed to ensure that users receive access only to the information and resources necessary for their roles, following the principle of least privilege. Users are required to authenticate their identities using strong methods, such as passwords, tokens, or biometrics, before accessing sensitive systems. Access requests for such information must go through a formal submission and approval process to ensure accountability. Regular reviews of access rights are conducted to verify their appropriateness, and modifications are made as needed.

For remote access, only authorized users can connect to the company’s systems through secure Virtual Private Network (VPN) connections and multi-factor authentication, reducing the risk of unauthorized access. Access rights for third-party vendors and contractors are carefully managed and monitored to ensure compliance with security policies.

8. Data Protection

Sensitive data will be encrypted both at rest and in transit. We will implement appropriate measures to securely store, handle, and dispose of sensitive information.

9. Incident Response

In the event of a security incident, we have established an incident response plan that outlines the steps to identify, contain, and remediate the incident. All employees are required to report any suspected security incidents immediately.

10. Training and Awareness

We are committed to fostering a culture of security awareness. Regular training will be provided to employees on information security best practices, data protection, and how to recognize and respond to security threats.

11. Compliance

Sison Corillo Parone & Co. will comply with all applicable legal and regulatory requirements related to information security, including data protection laws. Regular audits will be conducted to ensure compliance with this policy and relevant regulations.

12. Policy Review

Sison Corillo Parone & Co. will comply with all applicable legal and regulatory requirements related to information security, including data protection laws. Regular audits will be conducted to ensure compliance with this policy and relevant regulations.

13. Contact Information

For questions or concerns regarding this policy, please contact our Information Security Officer at nusison@scp-ph.com

Last Updated: September 02, 2024

Introduction

Welcome to Sison Corillo Parone & Co. By accessing or using our website www.scp-ph.com (the "Site"), you agree to comply with and be bound by the following terms and conditions (the "Terms of Use"). If you do not agree with these Terms of Use, please do not use our Site.

Use of the Site

Eligibility: You must be at least 18 years old or have the consent of a parent or guardian to use our Site.
License: We grant you a limited, non-exclusive, non-transferable, revocable license to access and use our Site for personal, non-commercial purposes. This license does not include any resale or commercial use of our Site or its contents.
Prohibited Activities: You agree not to:
- Use our Site for any illegal or unauthorized purpose
- Post or transmit any content that is defamatory, obscene, threatening, or otherwise objectionable.
- Interfere with or disrupt our Site or servers or networks connected to our Site.
- Attempt to gain unauthorized access to any portion of our Site or any other systems or networks.

Intellectual Property

Ownership: All content on our Site, including text, graphics, logos, images, and software, is the property of Sison Corillo Parone & Co. or its licensors and is protected by copyright, trademark, and other intellectual property laws.
Restrictions: You may not reproduce, distribute, modify, or create derivative works from any content on our Site without our express written permission.

Disclaimers

No Professional Advice: The information provided on our Site is for general informational purposes only and does not constitute specific professional accounting or financial advice. Always seek the advice of a qualified professional regarding any financial or accounting matters.
Accuracy: While we strive to ensure the accuracy of the information on our Site, we make no warranties or representations about its completeness, reliability, or timeliness.

Limitation of Liability

To the maximum extent permitted by law, Sison Corillo Parone & Co. shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of our Site or any content contained therein. Our total liability to you for any claims arising out of your use of the Site shall be limited to the amount you have paid, if any, for accessing the Site.

Indemnification

You agree to indemnify and hold harmless Sison Corillo Parone & Co., its affiliates, officers, directors, employees, and agents from any claims, liabilities, damages, losses, or expenses (including reasonable attorneys' fees) arising out of or related to your use of our Site or your violation of these Terms of Use.

Third-Party Links

Our Site may contain links to third-party websites that are not owned or controlled by us. We are not responsible for the content, privacy policies, or practices of any third-party sites. You access such sites at your own risk.

Changes to the Terms of Use

We may update these Terms of Use from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of our Site after the changes take effect constitutes your acceptance of the revised terms.

Governing Law

These Terms of Use are governed by and construed in accordance with the laws of the Republic of the Philippines, without regard to its conflict of law principles. Any disputes arising under or in connection with these Terms of Use shall be subject to the exclusive jurisdiction of the courts in Philippines.

Contact Us

If you have any questions or concerns about these Terms of Use, please contact us at:

Sison Corillo Parone & Co.
Unit 2005B, 20th Floor, West Tower, Tektite Towers
Exchange Road, Ortigas Center, Pasig City
scp@scp-ph.com
+632 8687 6649

SISON CORILLO PARONE & Co.

CONTACT INFORMATION

Coming Soon!