Our Approach to Security

Security Vision

To maintain a secure, resilient, and reliable environment that safeguards information assets and supports our clients in addressing evolving cybersecurity, operational, and business risks.

Our Approach

Ascendus maintains a comprehensive Information Security Program to protect the information and systems we own, manage, or access as part of our business operations and client engagements. Our approach includes:

• Physical, technical, and organizational security controls.
• Secure software development and system integration practices.
• Role-based access controls and the principle of least privilege.
• Compliance with applicable legal, regulatory, and contractual requirements.
• Business continuity and incident response planning.
• Clearly defined security roles and responsibilities.
• Regular security awareness and training programs.
• Processes for reporting, investigating, and responding to security incidents.
• Third-party risk management for vendors, partners, and service providers.

Governance

The Information Security Program is supported by internal policies, standards, and procedures and is regularly reviewed to ensure its effectiveness and alignment with evolving business, technology, and regulatory requirements.

This Policy applies to all employees, contractors, business partners, and authorized third parties with access to Ascendus' information assets, systems, or client environments. All individuals are expected to comply with this Policy, and any violation may result in disciplinary or contractual action, as applicable.