Stampede Solution Security Policy

Stampede Solution Sdn. Bhd. is committed to put in place and proactively manage an Information Security Management System (“ISMS”) which recognizes that Confidentiality, Integrity and Availability in information security are integral parts of its management function

Stampede's objective for the ISMS is to ensure comprehensive protection of its information assets against potential confidentiality breaches, failures of integrity and/or interruptions to their availability, and to minimize the risk of damage by preventing security incidents and reducing their potential impact.

The Information Security Policy (“Policy”) ensures that:

• Information will be protected against any unauthorized access;
• Confidentiality of information will be assured;
• Integrity of information will be maintained;
• Availability of information for business processes will be maintained with minimal disruption;
• Legal or regulatory requirements will be met;
• Business Continuity Plan (“BCP”) is developed, maintained and tested to counteract interruptions to business activities;
• All actual or suspected information security breaches will be reported to the Incident Response Team and thoroughly investigated; and
• Continual improvements are implemented by reviewing overall Policy implementation.

This policy is effective as of 31 March 2026.