Information Security and Cyber Security Statement
Jamborow recognises that financial inclusion technology depends on trust, resilience and security. Jamborow should maintain a risk-based information security programme aligned to recognised standards such as ISO 27001, NIST Cybersecurity Framework and applicable financial services expectations.
Core controls should include governance, asset management, access control, multi-factor authentication, secure software development, vulnerability management, penetration testing, supplier security, encryption, logging, monitoring, incident response, backup, disaster recovery, business continuity, staff training and periodic audits.
Users are responsible for keeping passwords, devices, OTPs and access credentials secure. Jamborow will never ask users to disclose full passwords or one-time codes by email or phone.