Audit and Assurance Services in the Philippines

1. Introduction

At Sison Corillo Parone & Co., we are committed to protecting the confidentiality, integrity, and availability of our information assets. This Information Security Policy outlines our approach to managing information security, safeguarding sensitive data, and ensuring compliance with applicable laws and regulations.

2. Purpose

The purpose of this policy is to:

• Define our information security objectives.
• Establish a framework for managing information security risks.
• Ensure that all employees, suppliers, and third parties understand their responsibilities regarding information security.

3. Scope

This policy applies to the firm’s executive managements and all of its employees, suppliers, and third-party service providers who have access to our information systems and data, including:

• All electronic and paper-based information.
• Software applications and IT systems.
• Communication channels and networks.

4. Information Security Objectives

Our main information security objectives are to:

• Protect sensitive and confidential information from unauthorized access and disclosure.
• Ensure the integrity of data by preventing unauthorized modifications.
• Maintain the availability of information and systems to authorized users when needed.

5. Roles and Responsibilities

Information Security Officer (ISO): The ISO oversees the implementation and maintenance of the Information Security Management System (ISMS). They develop, review, and update security policies, standards, and procedures, while also coordinating security awareness training and ensuring compliance with relevant regulations. Additionally, the ISO serves as the primary contact for security incidents and leads the response efforts to address these incidents.

Data Owners: Data owners are responsible for classifying data according to its sensitivity and criticality. They determine access levels and permissions for individuals or groups based on business needs and data classifications. Additionally, data owners regularly review access rights and permissions to ensure they align with business requirements and security policies.

System administrators: System administrators manage the daily operations of IT systems and infrastructure. They implement and maintain security controls, including access controls, firewalls, and intrusion detection systems. Additionally, they monitor system logs and audit trails for suspicious activities and security incidents, and they apply security patches and updates promptly to address vulnerabilities.

Employees: All employees must adhere to information security policies, standards, and procedures. They are responsible for safeguarding sensitive information and assets entrusted to them in their roles. Employees should promptly report any security incidents, breaches, or suspicious activities through the appropriate channels. Additionally, they are expected to participate in security awareness training and follow best practices for information security.

Human Resources (HR): HR is responsible for ensuring that employees receive sufficient security training and awareness. They manage the user access provisioning and de-provisioning processes according to established policies. Additionally, HR conducts background checks and enforces security policies related to employee conduct and compliance.

Legal and Compliance Team: The legal and compliance team ensures that information security policies and practices adhere to relevant laws, regulations, and industry standards. They provide guidance on legal and regulatory requirements related to data protection and privacy and assist in drafting contracts and agreements with third parties to safeguard sensitive information.

6. Risk Management

We will conduct regular risk assessments to identify and evaluate potential security risks to our information assets. Risk mitigation strategies will be implemented to address identified vulnerabilities.

7. Access Control

The Access Control Policy at Sison Corillo Parone & Co. is designed to ensure that users receive access only to the information and resources necessary for their roles, following the principle of least privilege. Users are required to authenticate their identities using strong methods, such as passwords, tokens, or biometrics, before accessing sensitive systems. Access requests for such information must go through a formal submission and approval process to ensure accountability. Regular reviews of access rights are conducted to verify their appropriateness, and modifications are made as needed.

For remote access, only authorized users can connect to the company’s systems through secure Virtual Private Network (VPN) connections and multi-factor authentication, reducing the risk of unauthorized access. Access rights for third-party vendors and contractors are carefully managed and monitored to ensure compliance with security policies.

8. Data Protection

Sensitive data will be encrypted both at rest and in transit. We will implement appropriate measures to securely store, handle, and dispose of sensitive information.

9. Incident Response

In the event of a security incident, we have established an incident response plan that outlines the steps to identify, contain, and remediate the incident. All employees are required to report any suspected security incidents immediately.

10. Training and Awareness

We are committed to fostering a culture of security awareness. Regular training will be provided to employees on information security best practices, data protection, and how to recognize and respond to security threats.

11. Compliance

Sison Corillo Parone & Co. will comply with all applicable legal and regulatory requirements related to information security, including data protection laws. Regular audits will be conducted to ensure compliance with this policy and relevant regulations.

12. Policy Review

Sison Corillo Parone & Co. will comply with all applicable legal and regulatory requirements related to information security, including data protection laws. Regular audits will be conducted to ensure compliance with this policy and relevant regulations.

13. Contact Information

For questions or concerns regarding this policy, please contact our Information Security Officer at nusison@scp-ph.com

Last Updated: September 02, 2024

Introduction

Welcome to Sison Corillo Parone & Co. We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website www.scp-ph.com (the "Site").

Information We Collect

We collect different types of information to provide and improve our accounting, tax, audit, advisory and other business related services including:

• Personal Identification Information: This includes your name, email address, phone number, and other contact details you provide when you request our services or communicate with us.
• Financial Information: Details necessary for providing our services, such as financial statements, tax returns, and other relevant documents you share with us.
• Technical Data: Information about your device, IP address, browser type, and browsing activity on our Site.
• Usage Data: Information on how you interact with our Site, such as the pages you visit and links you click.
• Cookies and Tracking Technologies: We use cookies to enhance your experience on our Site. You can manage your cookie preferences through your browser settings.

How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Services: To deliver accounting, tax, audit, advisory and other business related services tailored to your needs.
• To Communicate: To respond to your inquiries, provide updates, and send necessary information related to our services.
• To Improve Our Site: To analyze usage patterns and improve our website and services.
• For Compliance: To comply with legal, regulatory, and professional obligations, including maintaining accurate records and preventing fraud.

Sharing Your Information

We may share your information under the following circumstances:

• With Service Providers: We may share information with third-party vendors who assist us in delivering services, such as IT support or cloud storage providers. These vendors are bound by confidentiality agreements.
• For Legal Reasons: We may disclose your information to comply with legal requirements, respond to legal processes, or protect our rights and property.
• Professional Obligations: We may disclose information to other professionals (e.g., auditors) when required to perform services or fulfill regulatory requirements.

Security

We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, use, or disclosure. However, no method of data transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction and requirements, you may have certain rights regarding your personal data, including:

• Access: Request access to the personal data we hold about you.
• Correction: Request that we correct or update your personal data.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Restriction: Request that we restrict the processing of your personal data under certain conditions.

To exercise these rights, please contact us at scp@scp-ph.com.

Third-Party Links

Our Site may contain links to other websites that are not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Sison Corillo Parone & Co.
Unit 2005B, 20th Floor, West Tower, Tektite Towers
Exchange Road, Ortigas Center, Pasig City
scp@scp-ph.com
+632 8687 6649

Last Updated: September 02, 2024

Introduction

Welcome to Sison Corillo Parone & Co. By accessing or using our website www.scp-ph.com (the "Site"), you agree to comply with and be bound by the following terms and conditions (the "Terms of Use"). If you do not agree with these Terms of Use, please do not use our Site.

Use of the Site

• Eligibility: You must be at least 18 years old or have the consent of a parent or guardian to use our Site.
• License: We grant you a limited, non-exclusive, non-transferable, revocable license to access and use our Site for personal, non-commercial purposes. This license does not include any resale or commercial use of our Site or its contents.
• Prohibited Activities: You agree not to:
  • Use our Site for any illegal or unauthorized purpose
  • Post or transmit any content that is defamatory, obscene, threatening, or otherwise objectionable.
  • Interfere with or disrupt our Site or servers or networks connected to our Site.
  • Attempt to gain unauthorized access to any portion of our Site or any other systems or networks.

Intellectual Property

• Ownership: All content on our Site, including text, graphics, logos, images, and software, is the property of Sison Corillo Parone & Co. or its licensors and is protected by copyright, trademark, and other intellectual property laws.
• Restrictions: You may not reproduce, distribute, modify, or create derivative works from any content on our Site without our express written permission.

Disclaimers

• No Professional Advice: The information provided on our Site is for general informational purposes only and does not constitute specific professional accounting or financial advice. Always seek the advice of a qualified professional regarding any financial or accounting matters.
• Accuracy: While we strive to ensure the accuracy of the information on our Site, we make no warranties or representations about its completeness, reliability, or timeliness.

Limitation of Liability

To the maximum extent permitted by law, Sison Corillo Parone & Co. shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of our Site or any content contained therein. Our total liability to you for any claims arising out of your use of the Site shall be limited to the amount you have paid, if any, for accessing the Site.

Indemnification

You agree to indemnify and hold harmless Sison Corillo Parone & Co., its affiliates, officers, directors, employees, and agents from any claims, liabilities, damages, losses, or expenses (including reasonable attorneys' fees) arising out of or related to your use of our Site or your violation of these Terms of Use.

Third-Party Links

Our Site may contain links to third-party websites that are not owned or controlled by us. We are not responsible for the content, privacy policies, or practices of any third-party sites. You access such sites at your own risk.

Changes to the Terms of Use

We may update these Terms of Use from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of our Site after the changes take effect constitutes your acceptance of the revised terms.

Governing Law

These Terms of Use are governed by and construed in accordance with the laws of the Republic of the Philippines, without regard to its conflict of law principles. Any disputes arising under or in connection with these Terms of Use shall be subject to the exclusive jurisdiction of the courts in Philippines.

Contact Us

If you have any questions or concerns about these Terms of Use, please contact us at:

Sison Corillo Parone & Co.
Unit 2005B, 20th Floor, West Tower, Tektite Towers
Exchange Road, Ortigas Center, Pasig City
scp@scp-ph.com
+632 8687 6649