| DPWAT-ISMS-GOV-001 | ISMS Scope | 01.01-isms-scope | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-GOV-002 | Context of the Organization & Interested Parties | 01.02-context-and-interested-parties | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 12 months after effective date (or on major change) | Internal | |
| DPWAT-ISMS-POL-001 | Information Security Policy | 01.03-information-security-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-GOV-003 | Roles, Responsibilities, and Authorities | 01.04-roles-responsibilities-and-authorities | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 12 months after effective date (or on major change) | Internal | |
| DPWAT-ISMS-GOV-004 | Control of Documented Information | 01.05-control-of-documented-information | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-GOV-005 | Information Security Objectives | 01.06-information-security-objectives | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (during management review, or on major change) | Internal | |
| DPWAT-ISMS-GOV-006 | Competence, Awareness, and Training | 01.07-competence-awareness-and-training | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 | Internal | |
| DPWAT-ISMS-GOV-007 | ISMS Communication | 01.08-isms-communication | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 | 2027-02-01 (or on major change) | Internal | Defines what/when/whom/who/how for ISMS communications (ISO 27001 clause 7.4) |
| DPWAT-ISMS-RISK-001 | Risk Management Methodology | 02.01-risk-management-methodology | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or after major incident/change) | Internal | |
| DPWAT-ISMS-POL-002 | Acceptable Use Policy (AUP) | 03.01-acceptable-use-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-003 | Access Control Policy | 03.02-access-control-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-004 | Asset Management & Information Classification Policy | 03.03-asset-management-and-classification-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-005 | Cryptography & Secrets Policy | 03.04-cryptography-and-secrets-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-006 | Secure Development Policy | 03.05-secure-development-policy | Process Owners (RA) + CISO — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-007 | Supplier Management Policy | 03.06-supplier-management-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-008 | Incident Management Policy | 03.07-incident-management-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-009 | Business Continuity & Availability Policy | 03.08-business-continuity-and-availability-policy | Administrator (ADM) + CISO — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-010 | Logging & Monitoring Policy | 03.09-logging-and-monitoring-policy | Administrator + CISO — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-011 | Vulnerability Management Policy | 03.10-vulnerability-management-policy | Administrator + Process Owners — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-012 | Physical Security Policy | 03.11-physical-security-policy | Administrator + CISO — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-013 | Privacy & PII Protection Policy | 03.12-privacy-and-pii-policy | CISO — Timo Andreas Bejan (legal contact as applicable: Administrator (ADM) — Anna Boros) | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-014 | Policy Exceptions & Risk Acceptance | 03.13-policy-exceptions-and-risk-acceptance | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-015 | AI Acceptable Use Policy | 03.14-ai-acceptable-use-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-POL-016 | Segregation of Duties & Dual Control Policy | 03.15-segregation-of-duties-and-dual-control-policy | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-001 | People: Onboarding, Offboarding, and Third Parties | 04.01-people-onboarding-offboarding-and-third-parties | Administrator + CISO — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-002 | Access Requests, Changes, and Offboarding | 04.02-access-request-changes-and-offboarding | Administrator + CISO — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-003 | Change Management | 04.03-change-management | Process Owners (RA) + Administrator — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-004 | Backup and Restore | 04.04-backup-and-restore | Administrator — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-005 | Incident Response Procedure | 04.05-incident-response | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-006 | Supplier Onboarding and Review | 04.06-supplier-onboarding-and-review | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-007 | Log Review Procedure | 04.07-log-review | Administrator + CISO — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-008 | Vulnerability and Patching Procedure | 04.08-vulnerability-and-patching | Administrator + Process Owners — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or on major change) | Internal | |
| DPWAT-ISMS-PROC-009 | Internal Audit Procedure | 04.09-internal-audit | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 | Internal | |
| DPWAT-ISMS-PROC-010 | Management Review Procedure | 04.10-management-review | Administrator (ADM) — Anna Boros; Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 (or more often if needed) | Internal | |
| DPWAT-ISMS-PROC-011 | Nonconformity and Corrective Action | 04.11-nonconformity-and-corrective-action | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 (ISMS go-live date for baseline documentation set) | 2027-02-01 | Internal | |
| DPWAT-ISMS-REG-001 | Authorities Contact Register | authorities-contact-register | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 | 2027-02-01 (or when contacts change) | Internal | Review annually or when authority contact details change |
| DPWAT-ISMS-REG-002 | Customer Project Register | customer-project-register | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 | 2027-02-01 (or on project changes) | Internal | Documents customer projects and data access levels; informs risk assessment |
| DPWAT-ISMS-TPL-001 | Project Security Checklist | template-project-security-checklist | ISMS Manager / CISO (RMSI) — Timo Andreas Bejan | Administrator (ADM) — Anna Boros | 1.0 | 2026-02-01 | 2027-02-01 | Internal | Use at project kickoff and closure |