Yes. Information security process responsibility ownership lies with management. Any project must comply with all of QR Planet's internal policies, and is assessed appropriatly prior to deployment into production.
A set of information security policies are in place, covering the areas of Network Security, Change & Incident Management, Passwords, Access and Acceptable Use.
Yes. Information security process responsibility ownership lies with management and includes creation and regular external review.