Keysight Borderless Information Security Program Overview

This document is a technical report detailing the Keysight Borderless Information Security Program. It outlines a risk-based approach that incorporates industry standards and best practices to maintain the confidentiality, integrity, and availability of information. The program includes an Information Security Management System (ISMS) managed by a dedicated Information Security and Compliance organization, which reports to the Chief Information Security Officer. Key components of the program are described, including risk management, compliance assurance, vulnerability management, incident response, and security awareness training. The report also discusses the importance of organizational governance, training and awareness, and physical security measures. Additionally, it covers the processes in place for managing third-party risk, securing assets, and ensuring data protection through encryption and database activity monitoring. The program aims to protect both Keysight's data and customer data while ensuring adherence to various compliance regulations.