BBNC Code of Ethics Code of Ethics_Light_final_joomag 2 | Page 23

I n technology DATA SECURITY BBNC recognizes the vital role data and information plays in its business operations and the importance of taking steps to protect information in all forms. BBNC must comply with all local, state and federal laws and regulations that apply to collecting, retaining, storing, sharing and handling different types and categories of data. BBNC will categorize their respective data according to the impact that unauthorized access, loss of integrity, or interruption in the availably of the data would cause, the security measures needed to protect that particular category of data and the laws governing the treatment of that particular category of data.  If you have questions about data security or believe that data has been lost, stolen, miscategorized, mishandled or used improperly, contact your IT Department or the BBNC Compliance Department. Your Responsibilities Identify and protect company business data and information. Ask questions about the proper way to safeguard data and information. Participate in data security training. Government Contracting Data security is particularly important for companies engaged in government contracting. If you are working on a government contract, carefully review all applicable data security laws and regulations, including guidance on data security protection outlined in the FAR and DFAR. If you have questions, contact your IT Department or the BBNC Compliance Department. 21