Internal

1. EXCLUSIONS AND JUSTIFICATIONS

Exceptions to the policy may only be granted by the head of ITSS and CEO jointly (both sign-offs
required for each exception occurance). All exceptions must be documented properly in the
Exceptions Log and reviewed no less than annually.
 ADDENDUM A

Page 2
Document name: NS-RMS-ISMS-GL Version: 1.0
Classification: Internal Date of last revision: December 21st, 2022