> Named information-security, business-continuity, and risk-management policies for EthicsPortal.

Source: https://ethicsportal.eu/policies/
Updated: 2026-08-24

---

# Policies

Last updated: 2026-05-24.

Named policy documents that codify how EthicsPortal operates. Each is dated, signed, and reviewed annually.

The full document catalog --- including these policies alongside contractual and operational documents --- is on [/trust/](/trust/#public-documents).

- [Information security policy](/policies/information-security/)
- [Business continuity plan](/policies/business-continuity/)
- [Risk register](/policies/risk-register/)

## Pages in this section
- [Business continuity plan](https://ethicsportal.eu/policies/business-continuity/): How EthicsPortal responds to outages, sub-processor failures, restore events, and operator incapacity. Activation triggers, decision authority, and customer-communication protocol.
- [Information security policy](https://ethicsportal.eu/policies/information-security/): EthicsPortal's information security policy. Scope, roles, control commitments, review cadence, and document control.
- [Risk register](https://ethicsportal.eu/policies/risk-register/): EthicsPortal's information-security risk register. Top risks assessed against the Service, current treatment, and residual position.