Book a demo·
Customs
Tariff ClassificationClassify goods, detect duties automatically.Customs FilingsComing soonHandle customs declarations cost-efficiently.
Compliance
EU CBAMCO₂ border adjustment for imports into the EU.UK CBAMCO₂ border adjustment for imports into the UK.EUDRProve deforestation-free supply chains.PPWRReporting duties under the EU packaging regulation.
Learn & explore
BlogRegulatory analysis & product news.Case StudiesHow importers run compliance with kolum.Webinar HubLive & on-demand expert sessions.CBAM WeeklyThe latest CBAM news, every Friday.CBAM CalculatorEstimate your certificate exposure.
Legal

General Information Security Policy

Purpose

Protect the Company's informational and IT assets (including but not limited to all computers, mobile devices, networking equipment, software, and sensitive data) against all internal, external, deliberate, or accidental threats and to mitigate the risks associated with the theft, loss, misuse, damage or abuse of these systems.

Access control

Ensure information will be protected against any unauthorized access. Users shall only have access to resources that they have been specifically authorized to access. The allocation of privileges shall be strictly controlled and reviewed regularly.

Confidentiality

Protect the CONFIDENTIALITY of information. Confidentiality means protecting information from disclosure to unauthorized parties.

Integrity

Ensure the INTEGRITY of information. Integrity means protecting information from being modified by unauthorized parties.

Availability

Maintain the AVAILABILITY of information for business processes. Availability means ensuring that authorized parties can access information when needed.

Compliance

Comply with and, wherever possible, exceed, national legislative and regulatory requirements, standards, and best practices.

Continuous improvement

Continuously improve the information security management system by implementing corrective actions that improve its effectiveness.

Business continuity

Develop, maintain and test business continuity plans to ensure we stay on course despite all obstacles that we may come across. It is about "keeping calm and carrying on."

Awareness

Raise awareness of information security by making security training available for all employees. Security awareness and targeted training shall be conducted consistently, security responsibilities reflected in job descriptions, and compliance with security requirements shall be expected and accepted as part of our culture.

Non-retaliation

Ensure that no action will be taken against any employee who discloses an information security concern through reporting or in direct contact with the Information Security Management Leader, unless such disclosure indicates, beyond any reasonable doubt, an illegal act, gross negligence, or a repetitive deliberate or willful disregard for regulations or procedures.

Reporting

Report all actual or suspected information security breaches to security@kolum.earth.