The objective of this Policy is to protect the ROSWELL TANKERS CORP.’s information assets (note 1) from all threats, whether internal or external, deliberate or accidental, to ensure operations continuity, minimize damage and maximize return on investments and relevant industry opportunities.

To fulfil these objectives, the management is committed to the following approach:

• It is the Policy of the Company to ensure that:

1. Information and Systems identified as vulnerable to Cyber-attacks will be protected from a loss of confidentiality (note 2), integrity (note 3) and availability (note 4).
2. Regulatory and legislative requirements are to be met.
3. Cyber Security Contingency Plans have been produced for support (note 5).
4. Cyber Security training is available to all staff.
5. All breaches of information security, actual or suspected, will be reported and investigated.

• Guidance and procedures have been produced to support this policy. These include incident handling, information backup, system access, virus controls, passwords and encryption.
• The role and responsibility of the Information Security Manager is to manage information security and to provide advice and guidance on implementation of the Cyber Security Policy.
• All managers are directly responsible for implementing this Policy within their departments.
• It is the responsibility of each employee/crew member to adhere to the Cyber Security Policy.

NOTES

• Information takes many forms and includes data printed or written on paper, stored electronically, transmitted by post or by using electronic means, stored on tape or video, or spoken in conversation.
• Confidentiality: ensuring that information is accessible only to authorized individuals.
• Integrity: safeguarding the accuracy and completeness of information and processing methods.

Availability: ensuring that authorized users have access to relevant information when required.