Master Builders Insurance Brokers (MBIB) is a general insurance brokerage owned by the Australia’s Master Builders Associations. MBIB provides services to over 23,500 builders throughout NSW, VIC, SA, ACT, NT and WA.

The security of information in all its forms is of the utmost importance to the Executive Team and the Board. We acknowledge that as an organisation, we can minimise information security risks through the preservation of confidentiality, integrity and availability of information.

In order to achieve this, the following information security objectives have been established:

• Strategic and operational information security risk is understood and treated to be acceptable to MBIB;
• Maintain full visibility of our business data, who has access to it, and be able to revoke access when needed whilst at the same time leveraging MBIB information assets for optimum benefit;
• Monitor our Information, Communication and Technology (ICT) assets 24x7 to detect security breaches, assess the impact and contain the damage in real-time;
• Establish an effective security awareness program for employees to ensure best practices are adopted across the organisation to maintain a strong human firewall; and
• Adopt a risk-based approach in prioritising and deploying ICT investment.

To achieve these objectives, we shall act to:

• Communicate this policy to all existing employees and to new employees upon commencement;
• Comply with all legal and other requirements that are relevant to information security at MBIB;
• Make our commitment to information security visible to all interested parties; and
• Maintain and continually improve an Information Security Management System which meets the requirements of ISO 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements.

This policy, together with the objectives and targets set, will be reviewed on an annual basis to ensure that it remains relevant and suitable to the operations of MBIB. 

Paul Ayton
CEO

Dated: 23/09/2024

Information Security Policy Statement_v5