Integrated Management System Policy of ITS Joint Stock Company

20. 8. 2024

The activities of ITS joint-stock company are mainly focused on the development and implementation of its own software solutions, comprehensive hardware, system and infrastructure support for customer solutions (LAN, SAN, virtualization) and authorized service and sales of Lenovo, IBM, Apple and Toshiba POS systems. The focus on satisfying customer needs, continuous process improvement in the area of services provided, while maintaining environmental protection and compliance with information security rules led ITS joint stock company to the decision to implement an integrated quality management system, information security and environmental protection according to internationally recognized standards ISO 9001, ISO 27001 and ISO 14001. The intention of this policy is to ensure a management system that provides long-term quality products and services, meets the expectations of our customers, creates a stable base with technical and technological know-how, promotes innovation of the products and services provided while protecting the environment, creating safe and healthy working conditions, continuously improving the environmental management system and preventing pollution, reducing the impact of its activities on the environment. ITS Joint Stock Company attaches great importance to the security of the information entrusted to our care and handling. We view the protection of our own and our customers' information as a comprehensive and managed set of balanced measures designed to adequately protect all important assets, eliminating risks to the integrity, confidentiality and availability of information in the provision of our services to the lowest possible level.

ITS Joint Stock Company has established a core strategy that takes into account the needs and expectations of stakeholders identified in the context of the company. The following points are based on this strategy, which ITS Joint Stock Company is committed to fulfilling:

comply with laws, decrees and other binding legal norms of the Czech Republic
strictly adhere to the integrated quality management system, safety and environmental policy at all company sites
to manage the company so that it is profitable and can continuously improve the company and keep all stakeholders as satisfied as possible
Ensure sufficient human, material, financial, organizational and information resources necessary for the effective implementation of commitments and continuous improvement
build long-term business partnerships with customers to provide the best possible quality of service and meet increasing customer demands
to improve the skills and motivation of all company employees through continuous improvement programmes for products, services and processes and through regular training
to work with quality suppliers and establish partnerships with them that are mutually beneficial in the long term
create and maintain an organisational structure that clearly and unambiguously sets out the authority and responsibilities of all company personnel
implement changes to processes and procedures exclusively through a change management process, taking into account all potential risks and requirements
innovate the products and services provided according to the development of IT technologies
cooperate with government authorities, business partners, interest organisations and the public in the event of suggestions and comments
reduce the environmental impact of its activities and services and continuously improve the environmental profile of the company
to raise employee awareness of workplace and environmental protection, and of all environmental impacts of services, activities and products
to promote the environmentally sound disposal of electrical and electronic equipment within the collective system and the recycling of waste
prevent environmental pollution and reduce the material and energy intensity of the activities carried out
to develop the company's employees' knowledge of new technologies and trends, innovations in the field of security and data protection, digitalization and automation, to increase their qualifications, motivation and create a pleasant working environment
ensure adequate protection of information, know-how and all important assets of the company and our customers in accordance with contractual requirements, legislation and our internal regulations
Prevent risks and reduce risks to acceptable levels for all major assets of the company through recovery plans, risk spreading, insurance or delegation of responsibilities
identify potential threats, weaknesses and vulnerabilities in the information security system through risk management
ensure the availability, integrity and confidentiality of data

The Integrated Management System Policy is binding on all employees of ITS Joint Stock Company, at all sites, and records are kept and maintained to ensure that it is communicated to all employees, persons working for or on behalf of ITS Joint Stock Company, and all interested parties who are required to consistently follow all applicable documentation related to the Integrated System and thereby contribute
to the prevention of safety or other adverse events. Any deliberate compromise of the quality of products and services provided, the environment or information security will be considered a breach of job responsibilities. We also require compliance with this policy from our suppliers and other cooperating entities.

The Integrated Management System policy, objectives and targets are reviewed and updated by the management of the Company on a regular basis at least once a year as part of the review process by the senior management of ITS Joint Stock Company (or operationally) and published on the Company's website.

Prague, 20 August 2024