Information Security & AI Governance
These are the commitments we make in how we protect information and how we use artificial intelligence. They apply to our employees, contractors, and relevant interested parties.
Our commitment to information security
We protect the confidentiality, integrity, and availability of the information in our care, whether it is physical or electronic.
- We protect information from unauthorized access, disclosure, changes, and loss.
- We assess and treat information security risks through a consistent, repeatable process.
- We follow applicable legal, regulatory, and contractual requirements, including data privacy.
- We build security awareness and competence across the organization through training.
- We detect, respond to, and recover from security incidents promptly and effectively.
- We continually improve our Information Security Management System.
Our commitment to responsible AI
We are committed to the responsible, ethical, transparent, secure, and accountable use of artificial intelligence.
- We govern AI through a structured AI management system.
- We carry out AI risk and impact assessments before deploying any AI system that affects people.
- We work to keep our AI systems fair, explainable, and free from unjustified bias.
- We keep meaningful human oversight, including the ability to review, override, or appeal AI-assisted decisions with significant impact.
- We assess third-party AI tools and platforms before we adopt them.
- We make sure the data used to train, test, and operate AI systems is accurate, sound, and appropriate.
- We comply with applicable laws on AI, data privacy, and ethical technology use.
- We continually improve our AI management system.
Questions or concerns
If you have a question about these commitments, or want to report a concern about information security or our use of AI, please reach out to our team.