Information Security

We acknowledge the importance of information to the company which needs to be protected from threats that could potentially disrupt business continuity and harm the privacy rights of data subjects.

It is the policy of Facilitas Group to ensure the confidentiality, integrity and availability of its data and the data entrusted to us by our candidates and customers. We have implemented the ISO 27001 Information Security System and this is how we demonstrate our commitment to meeting customer, candidate and legislative requirements.

Policy implementation is achieved by:

• • Assuring the confidentiality of information.
  • Preserving the integrity of information.
  • Maintaining the availability of information for its intended purpose.
  • Meeting legislative and regulatory requirements.
  • Implementing and testing business continuity plans.

The CEO is accountable for maintaining the policy and providing support and advice during its implementation. All staff are directly responsible for implementing the policy and ensuring compliance in their respective roles.

Compliance with the Information Security Policy is mandatory. Both Management and Staff commit to ongoing reviews of the management system, with the aim of continually improving the effectiveness of the management system.

The policy will be reviewed annually by the CEO.

Pat Donegan
Group Services Director
2nd July 2025