Business Information System Security

Business Information System Security

        Premier Marketing Public Company Limited and its subsidiaries are committed to maintaining high standards for their operational systems, computer systems, and data communication systems. These are crucial foundations for building an effective control environment. The company takes various measures to ensure that operational data and computer systems are protected and available for business operations at all times. This also includes designing and costing control measures that are appropriate for the risks associated with data, operational systems, and computer systems.

  • Data includes electronic data, as well as documents, publications, image/audio data, etc.
  • Operational systems cover information systems and the use of computer systems.
  • Computers encompass computer systems, communication systems, and related computing devices.

Objectives of Information System Security

  1. To define the direction, principles, and guidelines for managing information technology system security.
  2. To build knowledge and understanding among employees to ensure compliance with policies, standards, operational frameworks, procedures, recommendations, and relevant laws pertaining to information systems.
  3. To prevent company computer systems and information from being stolen or interfered with in ways that could cause damage to the company's business operations.

Policy and Practices for Information System Security

        To achieve the aforementioned commitment, Premier Marketing Public Company Limited and its subsidiaries will adhere to the Premier Group's information system policies, standards, and procedures, facilitated by DataPro Computer Systems Co., Ltd. These practices are based on ISO/IEC 27001:2013 Information Security Management Systems, as follows:

  1. Define responsibilities for all users and administrators across both operational and computer systems.
  2. Assess risks and establish appropriate risk control systems that adapt to changing environments.
  3. Implement protection systems for data, operational systems, computer systems, and relevant personnel.
  4. Develop data preservation systems to prevent unauthorized access, modification, or destruction of data, whether accidental or intentional.

References

Premier Group Information System Security Policy