INFORMATION SECURITY POLICY STATEMENT

Mobihive Services Limited is a value added services company, offering unique products and services for telecom service providers and their customers.

Mobihive considers Information Security a top priority for customer confidence and brand protection, hence an Information Security Management System has been implemented in order to ensure the confidentiality, integrity and availability of all internal and external processing services, including physical and electronic information assets throughout the organization, in line with legal, regulatory as well as contractual compliance.

As a matter of policy, Mobihive commits and maintains an Information Security Management System which has been designed to meet the requirements of ISO27001:2013 in pursuit of its primary objectives. The scope of this system is at 174A Moshood Olugbani Street, Off Ligali Ayorinde St, Victoria Island, Lagos.

In order to drive continual improvement within the Information Security Management System, Mobihive set objectives on an annual basis as part of the Management Review Process; these objectives ensure the system is appropriately monitored and measured. All objectives are communicated to all staff and include key responsibilities, timescales and appropriate measures of success.

It is our Policy to ensure that:

• All information and systems will be protected against unauthorized access and disclosure
• Confidentiality of information will be maintained
• Integrity of information is protected from unauthorized modification
• Regulatory and legislative requirements will be met
• Business continuity plans will be maintained and tested (as far as practicable)
• All suspected breaches of information security will be reported and investigated
• Adequate prevention and detection of malware is in place
• Information Security Policies are in place to ensure the safe practice of using our computer and information systems
• We identify through appropriate risk assessment, the value of information assets in order to understand their vulnerabilities and the threats that may expose them to risk and to managing such risks appropriately
• Appropriate training will be provided for all employees
• Our Information Security Management System is maintained by a schedule of Internal audits carried out by competent internal auditors

Information Security Objectives:

• Objective 1 – Protection of the confidentiality, integrity and availability of information assets
• Objective 2 – Improve information security awareness culture in the organisation by at least 50%
• Objective 3 - Minimise loss of revenue on lending/recovery of airtime/data to customers by 2%
• Objective 4 - Minimise service downtime by at least 3%

By implementing the Information Security Management System in Mobihive we ensure compliance with ISO 27001:2013 Information Security Management Systems.

This policy is available to all internal and external interested parties upon request.