

This document is a technical report detailing Mastek's approach to information security and privacy management. It outlines the company's commitment to safeguarding digital assets through adherence to internationally recognized standards such as ISO/IEC 27001:2022 and ISO/IEC 27701:2019. The report describes Mastek's Information Security Management System (ISMS) and Privacy Information Management System (PIMS), emphasizing the importance of governance led by the Chief Information Security Officer (CISO). It highlights the proactive measures taken to ensure data confidentiality, integrity, and availability, including continuous monitoring and incident response capabilities. The document also covers the role of the Cyber Security, Privacy & AI Governance Committee in maintaining high standards of security and privacy. Furthermore, it discusses the training initiatives aimed at fostering a culture of cybersecurity awareness among employees, ensuring they are equipped to recognize and respond to potential threats. Overall, the report reflects Mastek's dedication to maintaining robust cybersecurity practices and protecting sensitive information.