Information Security Policy

At FFIM FREIGHT BROKER LLC, we are committed to safeguarding the confidentiality, integrity, and availability of all physical and electronic information assets. Our goal is to ensure compliance with regulatory, operational, and contractual requirements, guaranteeing that both the institution and our stakeholders maintain the highest levels of information security.

Objectives for Information Security

1. Compliance: Ensure adherence to current laws, regulations, and guidelines concerning data security.

2. Confidentiality, Integrity, and Availability: Protect and maintain the confidentiality, integrity, and availability of information for employees, clients, and all users.

3. Protection Against Threats: Establish appropriate controls to protect information and information systems from theft, abuse, harm, and loss.

4. Employee Responsibility: Encourage administrators and employees to take responsibility for information security by fostering awareness and understanding, minimizing the risk of security incidents.

5. Business Continuity: Ensure continuity of services even in the event of major security incidents.

6. Data Privacy Protection: Protect the personal data and privacy of employees and customers.

7. Reliable Infrastructure: Guarantee the availability and reliability of the network infrastructure and services.

8. Compliance with International Standards: Follow established international standards, specifically ISO/IEC 27001, for information security management.

9. External Compliance: Ensure that external service providers adhere to necessary information security standards and requirements.

10. Security for Remote Access: Allow secure and flexible access to information systems from off-campus locations while maintaining acceptable security levels.

Information Security Concepts

1. Confidentiality: Ensuring that information is only accessible to authorized individuals and processes.

2. Integrity: Maintaining the accuracy and completeness of information and systems.

3. Availability: Ensuring that authorized users have access to information and services when needed.

Risk Management Framework

Our business strategy and risk management framework are the basis for identifying, assessing, evaluating, and controlling information-related risks. We have implemented an information security policy and supporting documents to ensure secure operations, even after significant security incidents. This includes:

• Continuity plans to ensure operations persist after incidents.

• Backup procedures for data recovery.

• Defense measures against damaging code and malicious activities.

• System and information access controls to limit unauthorized access.

• Incident management and reporting protocols to handle security incidents promptly.

Security Practices and Expectations

• Network and Infrastructure Reliability: The availability and reliability of our network infrastructure and services are critical to our operations. While we prioritize transparency and public disclosure, there are instances where we must protect confidentiality over availability and integrity.

• Compliance: Every user of information systems within FFIM FREIGHT BROKER LLC must comply with this information security policy. Violations may constitute a breach of trust and may lead to consequences regarding employment or contractual relationships.

This policy is an integral part of our commitment to protect our information assets, ensuring the continued trust and security of our operations and relationships with clients and stakeholders.