Statement Managing Director

Statement

CORE N.V. is the leading multi-purpose ANSI/TIA 942-B Rated 3 certified Datacenter of Curacao. Safeguarding the information, we are trusted with is critical to our business’s survival. In order to safeguard the information, an information security policy is an absolute must. CORE recognizes the need to ensure that its business and, in particular, its ANSI/TIA 942-B Rated 3 certified Datacenter operates smoothly and without interruption for the benefit of its customers and shareholders.

In order to provide such a level of continuous operation, CORE has implemented an Information Security Management System (ISMS) in line with the International Standard for Information Security, ISO/IEC 27001:2022.

The operation of this ISMS has many benefits for the business, including:

• protection of revenue streams and company profitability;
• Ensure a reliable supply of ICT services to our customers;
• compliance with legal and regulatory requirements;
• ISO 27001 certification.

The Information Security Policy is a CORE document ratified by the Managing Director and is available in both paper and electronic form and will be communicated within the organization and to all relevant stakeholders and interested third parties with access rights to CORE’s ICT recourses.

The Information Security Forum will ensure that a systematic review of the performance of the program is conducted on a regular basis to ensure that information security objectives are being met and relevant issues are identified through the audit program and management processes.

A risk management approach and process will be used which is in line with the requirements and recommendations of ISO/IEC 27001. Risk management will take place at several levels within the ISMS, including:

1. Assessment of risks to the achievement of our information security objectives.
2. Regular information security risk assessments within specific operational areas.
3. Assessment of risk as part of the business change management process.
4. At the project level as part of the management of significant change.

I would encourage all employees to ensure that they play their part and responsibility in delivering our information security objectives.

September 2023

Managing Director