Group Information Security Policy

Policy purpose and values

Information security is essential to support the organisation's operations, development and innovation. In recognition of this the group's Information Security Management System has been developed to achieve the objectives listed below, under the authority granted by this policy.

Scope

This policy is applicable to the whole Renishaw Group (including without limitation directors, officers, trustees, permanent employees, contingent workers, temporary and contract workers, contractors, consultants, secondees, trainees, interns, apprentices, and students on industrial placements) and anyone else who has access to Renishaw's Information Technology.

This policy does not form part of any contract, and Renishaw may amend it at any time.

Policy statement

The implementation and endorsement of this policy provides the authorisation required to continue to develop, improve and maintain the Information Security Management System for all worldwide activity in accordance with the objectives set out below.

• Control appropriate access to and endeavour to ensure continual availability of information owned by and entrusted to Renishaw.
• Protect information against internal and external threats.
• Protect Renishaw Information entrusted to external entities.
• Protect personal information.
• Educate all users of our Information Systems to ensure they are aware of how to interact with the systems in a safe and appropriate manner and their obligation to do so.
• Ensure that all components of our Information Systems are supported and licensed for their roles.