Information Security Management System

POL-001 Information Security Policy Statement

1. Information Security Policy

The Alpha School System Pty Ltd (TASS) provides centralised school management and portal solutions connecting schools and their communities.

To achieve this, the following information security objectives have been established:

  • Keep customer data and intellectual property rights safe.
  • Maintain a high level of staff awareness of the Information Security Management System.
  • Maintain 3 Party Certification ISO/IEC 27001.

To achieve these objectives, we shall act to:

  • Conduct regular penetration testing, auditing, and vulnerability management.
  • Communicate this policy to all existing employees and new employees upon commencement.
  • Comply with all legislative and other information security requirements that are relevant to TASS.
  • Make our commitment to information security visible to all interested parties.
  • Maintain and continually improve our regular staff security and Information Security Management System training.
  • Conduct regular internal and external audits of our Information Security Management System.
  • Maintain and continually improve an Information Security Management System that meets the requirements of ISO/IEC 27001.

This policy, together with the objectives set, will be reviewed annually to ensure that it remains relevant and suitable for operations of TASS.

!

10 March 2026

Lee Fisher

CEO

Date