Cyber Security Policy

1. Cyber Security Policy

Purpose: Binns Canada Ltd is committed to protecting its information, systems, and client data against cyber threats. As a provider of high-security perimeter solutions, cyber security is a core part of our overall security responsibility.

Scope:

This policy applies to all employees, contractors, and systems used by Binns Canada Ltd.

Key Principles:

• Access to systems is controlled and limited to authorised users only
• Multi-Factor Authentication (MFA) is required on critical systems
• All devices must be secured with passwords and kept up to date
• Company data must only be stored on approved systems (e.g. SharePoint/OneDrive)
• Regular backups must be maintained and tested
• Staff must remain vigilant to phishing and cyber threats

Responsibility:

The VP Operations is responsible for overseeing cyber security within the business.

Compliance:

Failure to follow this policy may result in disciplinary action.

2. Incident Response Plan

In the event of a cyber incident (e.g. phishing, data breach, lost device):

1. Identify: Recognise unusual activity, suspicious emails, or system issues
2. Contain: Disconnect affected devices from the network immediately
3. Report: Notify VP Operations immediately; Escalate to IT support if required
4. Assess: Determine what data or systems may be affected
5. Recover: Restore systems from backups if necessary; Reset passwords and secure access
6. Communicate: Inform affected clients if required (management decision) All incidents must be documented and reviewed.

3. Cyber Security Statement (For Proposals)

Binns Canada Ltd recognises the importance of cyber security in protecting critical infrastructure and sensitive client information.

We operate in alignment with CyberSecure Canada principles and have implemented robust controls including secure access management, multi-factor authentication, data protection measures, and incident response procedures.

As part of our commitment to continuous improvement, Binns Canada is actively preparing for compliance with the Canadian Program for Cyber Security Certification (CPCSC) in line with federal defence requirements.

Cyber security is treated as an integral part of our overall security offering, supporting our work across high-security, data centre, and defence environments