{"id":742,"date":"2026-06-30T12:24:55","date_gmt":"2026-06-30T11:24:55","guid":{"rendered":"https:\/\/mapalstg.wpengine.com\/en\/?page_id=742"},"modified":"2026-09-18T13:07:46","modified_gmt":"2026-09-18T12:07:46","slug":"security-policy","status":"publish","type":"page","link":"https:\/\/mapal-os.com\/en\/security-policy\/","title":{"rendered":"Security policy"},"content":{"rendered":"\n<h1>Information Security Policy\n<\/h1> <br><h2>Purpose<\/h2>\n<br>\n<p>\n  Mapal Group (companies listed in Appendix A) is committed to protecting the confidentiality, integrity and availability of information, including personal data, and of the systems and services that support its business operations and the delivery of its products and services. Information security is essential to maintaining customer trust, delivering secure and reliable software products and services, supporting resilient business operations and enabling sustainable growth.\n<\/p>\n<br>\n<h2>Policy Statements<\/h2>\n<br>\n<p>\n  Mapal Group shall maintain an Information Security Management System appropriate to the organisation&#8217;s business objectives, risk profile and applicable legal, regulatory and contractual obligations. To achieve this, Mapal Group shall:\n<\/p>\n\n<ul>\n  <li>Establish, maintain and continually improve a documented information security framework consisting of this policy, supporting standards, procedures, guidelines and records.<\/li>\n  <li>Organise information security requirements and controls into defined security domains to support consistent governance, risk management, implementation and continual improvement.<\/li>\n  <li>Define topic-specific information security requirements through CISO-approved security standards.<\/li>\n  <li>Identify, assess, treat and monitor information security risks using the approved risk assessment and treatment methodology.<\/li>\n  <li>Protect information assets through appropriate administrative, technical and physical controls.<\/li>\n  <li>Integrate information security requirements into business processes, products, services and projects.<\/li>\n  <li>Meet applicable legal, regulatory and contractual obligations relating to information security, data protection and privacy.<\/li>\n  <li>Promote security awareness and accountability across the organisation.<\/li>\n  <li>Monitor, review and continually improve the effectiveness of the information security programme and ISMS.<\/li>\n<\/ul>\n<br>\n<h2>Authority and Governance<\/h2>\n<br>\n<p>\n  The Chief Executive Officer provides executive sponsorship for information security and approves this policy.\n<\/p>\n\n<p>\n  The Chief Information Security Officer is authorised to establish, maintain and approve the information security framework, including security standards, procedures, guidelines and supporting controls necessary to implement this policy and operate the ISMS.\n<\/p>\n\n<p>\n  The Information Security Board provides consultation and challenge on new or materially changed information security policies and standards, material exceptions, security risk posture and strategic security governance matters. The Board does not replace the CISO&#8217;s delegated approval authority for standards unless a matter is escalated under the approved governance or risk management process.\n<\/p>\n\n<h2>Standards Governance<\/h2>\n\n<p>\n  Security standards are mandatory topic-specific information security requirements. Each standard shall be approved, published, communicated to relevant audiences, acknowledged where appropriate, reviewed at planned intervals and reviewed following significant change.\n<\/p>\n<br>\n<h2>Roles and Responsibilities<\/h2>\n<br>\n<p>\n  The Chief Information Security Officer is accountable for establishing and maintaining the information security framework, overseeing and monitoring the effectiveness of information security controls and reporting on the security posture of the organisation.\n<\/p>\n\n<p>\n  Managers are responsible for ensuring applicable information security requirements are followed within their areas of responsibility.\n<\/p>\n\n<p>\n  System, service and data owners are accountable for the secure management of assets and information under their ownership and for ensuring applicable controls are implemented, operated and maintained.\n<\/p>\n\n<p>\n  All personnel and authorised third parties must comply with applicable information security requirements and promptly report suspected security incidents, weaknesses or policy exceptions.\n<\/p>\n<br>\n<h2>Risk Acceptance<\/h2>\n<br>\n<p>\n  Risk acceptance authorities are defined in the approved Risk Assessment and Treatment Methodology and are not redefined by this policy.\n<\/p>\n<br>\n<h2>Governance and Review<\/h2>\n<br>\n<p>\n  This policy shall be reviewed at least annually or following significant business, legal, regulatory, technological, organisational or risk changes. Exceptions to this policy and supporting standards must be documented, risk-assessed, approved by the appropriate authority and reviewed periodically.\n<\/p>\n<br>\n","protected":false},"excerpt":{"rendered":"<p>Information Security Policy Purpose Mapal Group (companies listed in Appendix A) is committed to protecting the confidentiality, integrity and availability of information, including personal data, and of the systems and services that support its business operations and the delivery of its products and services. Information security is essential to maintaining customer trust, delivering secure and [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_mapal_is_product_page":false,"_mapal_availability_override_enabled":false,"_mapal_available_markets":[],"_mapal_availability_notice_title":"","_mapal_availability_notice_body":"","_mapal_availability_notice_cta_label":"","_mapal_global_availability_panel_enabled":false,"_mapal_global_availability_panel_use_defaults":true,"_mapal_global_availability_panel_heading":"","_mapal_global_availability_panel_intro":"","_mapal_global_availability_panel_cta_label":"","_mapal_global_availability_panel_cta_mode":"","_mapal_global_availability_panel_hide_missing_regions":false,"editor_notices":[],"footnotes":"","_mapal_market_applicability":[],"_mapal_localisation_intent":"","_mapal_localisation_intent_reason":"","_mapal_content_proposal_desired_slug":""},"class_list":["post-742","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.1 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Security policy | Hospitality Software | Mapal UK<\/title>\n<meta name=\"description\" content=\"Information Security Policy Purpose Mapal Group (companies listed in Appendix A) is committed to protecting the confidentiality, integrity and Discover how Mapal UK helps UK hospitality businesses improve operations, workforce management and business performance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mapal-os.com\/en\/security-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security policy | Mapal UK\" \/>\n<meta property=\"og:description\" content=\"Discover how Mapal UK helps UK hospitality businesses improve operations, workforce management and business performance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mapal-os.com\/en\/security-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Mapal UK\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-18T12:07:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mapal-os.com\/en\/wp-content\/uploads\/sites\/9\/2026\/07\/mapal-open-graph.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/security-policy\\\/\",\"url\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/security-policy\\\/\",\"name\":\"Security policy | Hospitality Software | Mapal UK\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/#website\"},\"datePublished\":\"2026-06-30T11:24:55+00:00\",\"dateModified\":\"2026-09-18T12:07:46+00:00\",\"description\":\"Information Security Policy Purpose Mapal Group (companies listed in Appendix A) is committed to protecting the confidentiality, integrity and Discover how Mapal UK helps UK hospitality businesses improve operations, workforce management and business performance.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/security-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mapal-os.com\\\/en\\\/security-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/security-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/\",\"name\":\"Mapal UK\",\"description\":\"Hospitality technology solutions by Mapal\",\"publisher\":{\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/#organization\",\"name\":\"Mapal\",\"url\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/9\\\/2026\\\/06\\\/mapal-os-logo-1.svg\",\"contentUrl\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/9\\\/2026\\\/06\\\/mapal-os-logo-1.svg\",\"width\":195,\"height\":32,\"caption\":\"Mapal\"},\"image\":{\"@id\":\"https:\\\/\\\/mapal-os.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/mapal-group-uk\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCtYMrLrBhXNuiAFpRX2bJHw\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Security policy | Hospitality Software | Mapal UK","description":"Information Security Policy Purpose Mapal Group (companies listed in Appendix A) is committed to protecting the confidentiality, integrity and Discover how Mapal UK helps UK hospitality businesses improve operations, workforce management and business performance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mapal-os.com\/en\/security-policy\/","og_locale":"en_GB","og_type":"article","og_title":"Security policy | Mapal UK","og_description":"Discover how Mapal UK helps UK hospitality businesses improve operations, workforce management and business performance.","og_url":"https:\/\/mapal-os.com\/en\/security-policy\/","og_site_name":"Mapal UK","article_modified_time":"2026-09-18T12:07:46+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/mapal-os.com\/en\/wp-content\/uploads\/sites\/9\/2026\/07\/mapal-open-graph.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/mapal-os.com\/en\/security-policy\/","url":"https:\/\/mapal-os.com\/en\/security-policy\/","name":"Security policy | Hospitality Software | Mapal UK","isPartOf":{"@id":"https:\/\/mapal-os.com\/en\/#website"},"datePublished":"2026-06-30T11:24:55+00:00","dateModified":"2026-09-18T12:07:46+00:00","description":"Information Security Policy Purpose Mapal Group (companies listed in Appendix A) is committed to protecting the confidentiality, integrity and Discover how Mapal UK helps UK hospitality businesses improve operations, workforce management and business performance.","breadcrumb":{"@id":"https:\/\/mapal-os.com\/en\/security-policy\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mapal-os.com\/en\/security-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/mapal-os.com\/en\/security-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mapal-os.com\/en\/"},{"@type":"ListItem","position":2,"name":"Security policy"}]},{"@type":"WebSite","@id":"https:\/\/mapal-os.com\/en\/#website","url":"https:\/\/mapal-os.com\/en\/","name":"Mapal UK","description":"Hospitality technology solutions by Mapal","publisher":{"@id":"https:\/\/mapal-os.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mapal-os.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/mapal-os.com\/en\/#organization","name":"Mapal","url":"https:\/\/mapal-os.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/mapal-os.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mapal-os.com\/en\/wp-content\/uploads\/sites\/9\/2026\/06\/mapal-os-logo-1.svg","contentUrl":"https:\/\/mapal-os.com\/en\/wp-content\/uploads\/sites\/9\/2026\/06\/mapal-os-logo-1.svg","width":195,"height":32,"caption":"Mapal"},"image":{"@id":"https:\/\/mapal-os.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/mapal-group-uk\/","https:\/\/www.youtube.com\/channel\/UCtYMrLrBhXNuiAFpRX2bJHw"]}]}},"_links":{"self":[{"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/pages\/742","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/comments?post=742"}],"version-history":[{"count":4,"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/pages\/742\/revisions"}],"predecessor-version":[{"id":5295,"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/pages\/742\/revisions\/5295"}],"wp:attachment":[{"href":"https:\/\/mapal-os.com\/en\/wp-json\/wp\/v2\/media?parent=742"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}