MTS Management reaffirms its full commitment to establishing Information Security as a fundamental pillar of trust and operational excellence. This commitment extends to our employees, clients, partners, and all third parties involved in our digital and commercial activities.

Accordingly, MTS adopts the following principles and objectives:

• Promote a culture of security across all levels of the organization, ensuring that Information Security is a shared responsibility and a core business value.
• Empower employees by encouraging active participation in protecting information assets and maintaining awareness of evolving cyber threats.
• Safeguard confidentiality, integrity, availability, and resilience of all information, ensuring compliance with applicable legal, regulatory, and contractual requirements.
• Collaborate transparently with clients, partners, and providers in managing security incidents and vulnerabilities, ensuring coordinated response and rapid recovery to minimize impacts.
• Protect information assets against all forms of threats—whether internal or external, intentional or accidental—to guarantee service continuity and protect client trust.
• Implement a proactive risk management approach, maintaining an Information Security Plan that identifies, assesses, and mitigates risks consistent with MTS’s risk management framework.
• Allocate appropriate resources to ensure effective governance, risk treatment, and technology adoption that support security objectives.
• Adopt the ISO/IEC 27001 standard as the foundation of our Information Security Management System (ISMS), with ISO/IEC 27002 and related frameworks providing practical guidance for continual improvement.
• Promote continuous training and awareness, ensuring all personnel understand their responsibilities and comply with this policy.
• Extend our commitment to security to clients and stakeholders by promoting secure practices, transparency, and mutual trust across our entire value chain.

MTS’s management will regularly review this policy to ensure its ongoing suitability, adequacy, and alignment with the organization’s strategic goals and the evolving cybersecurity landscape.

Date: 01/06/2026