Go back
INTEGRATED MANAGEMENT SYSTEM (IMS) POLICY STATEMENT

Globus Bank (“Globus” or “the Bank”) is committed to continually improving the quality of financial services by leveraging Technology and People to deliver exceptional customer experience, as well as applicable legal requirements for our products and services.

As a leading development finance institution, Globus Bank recognizes the need to ensure business operations are performed smoothly and without any interruptions for the benefit of all stakeholders.

The Bank aligns processes to achieve compliance with these commitments by implementing and maintaining an Integrated Management System (“IMS”), forming an integral part of the Bank’s business strategy, and designed to meet the requirements of ISO 27001 (Information Security Management System), ISO 20000 (IT-Service Management System), and ISO 22301 (Business Continuity Management System).

The Objectives of implementing and maintaining an Integrated Management System (“IMS”) for the benefit of all stakeholders include:
  • Ensuring 100% of business information is adequately protected and readily available, and business continuity risks are treated and controlled within the Bank’s risk appetite.
  • Ensuring 95% of information security risks and cyber threats are reduced to the Bank's acceptable level and areeffectively managed.
  • Ensuring 80% of Globus Bank's stakeholders are fully aware of their cybersecurity responsibilities.
  • Ensure 100% compliance with applicable legislation, regulations, and contractual obligations.
  • Implement and Establish plans, procedures, strategies, and solutions to protect 100% of persons working within the Bank’s environment.
  • Implement and exercise plans and solutions to guarantee all Critical Processes can be recovered within a maximum of 24 hours.
  • Ensure service delivery by meeting agreed-upon service level targets for 90% of services.
  • Achieve an 85% average level of customer satisfaction in IT services and solutions.
  • Ensure 85% of service requests and incidents are resolved within SLA.
  • Ensure continual improvement by regularly conducting internal audits, monitoring, and measuring the effectiveness of the IMS.
Globus Bank’s Executive leadership is committed to proactively:
  • Implementing the necessary capabilities to ensure the continuity of its critical business functions during serious disruptive incidents or disasters and to ensure the recovery of such critical functions to an operational state within acceptable timeframes.
  • Developing business continuity capability as a strategic asset comprising adequate resources and capabilities; including approvals of appropriate budget where required to achieve the required Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
  • Ensuring the Integrated Management System (IMS) objectives are set, and adequate resources are provided to achieve them. IMS Objectives must be in alignment with the business requirements, and compatible with the strategic direction of the Bank.
  • Achieve ISO 27001, ISO 20000, and ISO 22301 certifications and maintain them on an ongoing basis.
  • Review service level metrics on an annual basis to assess whether it is appropriate to change them, based on collected historical data and customer feedback.
  • Obtain ideas for improvement via regular meetings with Customers, and stakeholders, and document them in a Continual Improvement Plan.
  • Review the continual improvement log at regular management meetings to prioritize and assess timescales and benefits.
  • Raising the awareness of all our employees and stakeholders to ensure the benefits of meeting the IMS objectives are understood.
  • Ensuring all employees are made aware of and understand the IMS policy, procedures, and supporting documentation, through training and provision of information. Compliance is confirmed as a result of formal internal audits and at management review, which is conducted at least once a year.

Signed:

Elias Igbinakenzua

Managing Director

29-Nov-2022