Cyber Security Policy Manual

D OCUMENT I NFORMATION

Policy Name: Cyber Security Policy Manual Document Reference Number: GSO-CSPM-001 Version : 1.8 Effective from : 3/1/2018 Document Change History and Revision Control

Version

Sections Revised

Description of Revision

Changed By

Date

1.0

All

- Initial Document Creation

Cyber Security Team Cyber Security Team Cyber Security Team

2/7/2018

1.1

- Updated Social Media Policy

2/4/2019

1.2

- Updated the internal audit section of the ISMS policy - Added Card Payment Handling Policy - Updated password configuration in User Provisioning Policy - Provided updates to Social Media Policy

1/28/2020

1.3

Law & Compliance Team

5/13/2020

1.4

- Updated Vulnerability Management Policy

Cyber Security Team

1/29/2021

1.5

- Updated Mobile Device Policy

Cyber Security Team

1/31/2023

1.6

All

- Updated roles and responsibilities throughout the policy - Removed Social Media Policy - Updated ISMS policy to reflect compliance to ISO27001:2022 - Removed Supplier Risk Management Policy

Cyber Security Team

2/16/2024

1.7

Cyber Security Team

2/17/2025

Cyber Security Policy Manual

4