1. Purpose and Scope

1.1 Purpose

This Information Security Policy establishes a framework for managing and protecting the confidentiality, integrity, and availability of MARTECH3D’s information assets. It outlines the security standards, procedures, and responsibilities necessary for safeguarding data and ensuring compliance with legal, regulatory, and contractual obligations.

1.2 Scope

This policy applies to all full-time, part-time, and temporary employees; contractors; vendors; and any other third-party entities who have access to MARTECH3D’s information systems, data, or resources. It covers all systems, applications, networks, and devices (including mobile devices) owned, leased, or otherwise provided by MARTECH3D.

2. Governance and Compliance

2.1 Policy Ownership and Management

• The Chief Technology Officer (CTO), Gbenga Oyeniyi, is responsible for the development, implementation, and maintenance of this policy.
• The Security Governance Committee (SGC)—comprising senior management, IT leadership, and department heads—provides oversight, approves policy updates, and ensures alignment with strategic business goals.

2.2 Regulatory and Standards Alignment

• This policy aligns with widely recognized security frameworks and standards including SANS, ISO 27001, and NIST 800-53.

• Polished Rock Ltd T/A MARTECH3D is GDPR compliant; ICO Data Protection Organisation Reference ZB516804 (renews 22/02/2027). Registration Certificate can be found below

  <aside> 💡

  ICO Registration Certificate

  </aside>

  <aside> 💡

  GDPR Protection Policy

  </aside>

2.3 Policy Review and Maintenance

• This policy must be reviewed annually or whenever significant changes occur in the organization’s security posture, technology stack, or regulatory environment.
• All revisions must be approved by the Security Governance Committee.

3. Roles and Responsibilities

3.1 Executive Management

• Provide leadership support and resources necessary to implement and maintain this policy.