Security Policy

Alt HAN Co recognises information as a critical business asset. How information is managed, controlled and protected has a significant impact on the delivery of our services, legal and regulatory compliance, and the trust of our customers, suppliers and stakeholders. Alt HAN Co is committed to designing, implementing and maintaining an information security function that protects its systems, services and data against unauthorised use, disclosure, modification, damage, loss or disruption.

The protection of information is integral to the success of Alt HAN Co. Employees and contractors must comply with the requirements of the Information Security Management System (ISMS) to help maintain the confidentiality, integrity and availability of internal, customer and supplier information.

The Board and Senior Management Team provide leadership, oversight and appropriate resources for information security. All employees and contractors are responsible for promoting a positive security culture by following policies, processes and procedures, completing required awareness activities, and reporting actual or suspected information security weaknesses or incidents.

Information security controls are monitored, reviewed and improved to ensure they remain effective, support business objectives, address information security risks, and meet applicable statutory, regulatory and contractual requirements.

To ensure commitment to Information Security is controlled through the preservation of:

Confidentiality: ensuring that information is accessible only to those authorised to have access;

Integrity: safeguarding the accuracy and completeness of information and processing methods;

Availability: ensuring that authorised users have access to information and associated assets when required.

Alt HAN Co operates a programme of information security awareness and compliance training through company inductions and ongoing training activities. All employees are encouraged to identify potential security weaknesses and/or incidents and report them through the appropriate management channels.

A robust system is in place to continually improve the security controls to: –

• Take account of changes to business requirements and priorities;
• Consider new threats, vulnerabilities and information security risks.

Information security objectives and targets are set, measured for effectiveness, and reported through Board meetings and Information Security Forums. This is led by the Senior Management Team and Leadership Team to ensure the ISMS remains effective and aligned to business needs.

This Policy Statement will be reviewed annually, or sooner where there are significant changes to Alt HAN Co’s business, legal, regulatory, contractual or information security risk environment, to ensure it remains appropriate and supports continual improvement.

Paul Cooper
Managing Director
June 2026