These Terms and Conditions describe rules and disclaimers under which to use the IISRI® website and any information and content provided on the IISRI® website, including ratings and ratings reports.

1. Definitions

In these Terms and Conditions, also on the IISRI® website and in any materials or content related to this website; we use the following definitions: IISRI® - Shall always refer to as the Independent Information Security Rating Institute Ltd. IISRI® is a registered and protected trademark owned by the Independent Information Security Rating Institute Ltd. ASO – Shall always refer to Assessed Services and Organization AO – Shall always refer to Assessed Organization Rating – Shall always refer to IISRI® statements of opinion, not statements of fact or recommendation External Security Rating – Shall always refer to IISRI® rating based only on publicly available information Internal Security Rating – Shall always refer to IISRI® rating based on publicly available and voluntary provided information by the AO The Public – Shall always refer to any individual person or organization The Website – Shall always refer to any websites and applications within iisri.com domain.

2. Terms and Conditions applicability

Whenever you use or/and access the IISRI® website, you confirm that you agree with these Terms and Conditions. This website uses cookies to store information about when you accessed this website and what versions of the Terms and Conditions were applicable at that time. If we modify these Terms and Conditions, we will display the message about the Terms and Conditions at the bottom corner of your web browser. We may display the same message from time to time (at our sole discretion) to remind you about the applicability of these Terms and Conditions to any information or content on this website. It is your responsibility to read the Terms and Conditions.

3. IISRI® Services and Information provided to you

IISRI® provides you with: -publicly available ratings -rating reports – paid reports of IISRI® opinion which led to the rating -external rating service – you can request IISRI® to assess and issue an external rating to any services or/and organization on the world.

IISRI®, at sole discretion may or may not proceed with your request for an internal rating service – any organization can request IISRI® to assess and issue an internal rating to their services or/and their organization. IISRI®, at sole discretion may or may not proceed with this request.

4. Intellectual Property Rights

The IISRI® website and any information and content related to this website, is the property of IISRI® or is based on the publicly available information providers, and is protected by copyright and other intellectual (property) laws. This website cannot be reproduced, copied or distributed without written permission of IISRI®. You shall honour all reasonable requests by IISRI® to protect IISRI® proprietary interests in this website and its related content.

5. Forbidden Use Policy

You agree to follow this Forbidden Use Policy. You will not:

-use or attempt to use any website mining tools, mirroring tools, and take a copy of any information and or materials from the IISRI® website.

-obtain or access, attempt to obtain or access through any means any information or content of the IISRI® website that has not been made intentionally publicly available in any meaning; test the security of any of IISRI® servers, infrastructure, networks applications and the IISRI® website without written permission of IISRI®.

-interfere or attempt to interfere with the IISRI® website by excessive load, traffic or requests reverse engineer rating framework as this may indirectly lead to the actionable confidence breach (according to New Zealand Crime Act 1981) and put the public and their information at risk.

6. Complaints, Corrections and Response Processes

We encourage the assessed organizations and the public to review and clarify any inaccuracies in our reports. IISRI® aims to provide an opinion as accurately as possible but also in an objective manner. If you, as the assessed organization, think you have found inaccuracy or omissions in our statement you can follow our corrections process. The public can notify IISRI® about any inaccuracy or omissions via the "Contact Us" link on our IISRI® website.

We encourage the assessed organizations and the public to review and clarify any inaccuracies in our reports. IISRI® aims to provide an opinion as accurately as possible but also in an objective manner. If you, as the assessed organization, think you have found inaccuracy or omissions in our statement you can follow our corrections process. The public can notify IISRI® about any inaccuracy or omissions via the "Contact Us" link on our IISRI® website.

We also encourage the assessed organizations to provide their management response to our ratings to better inform their customers. The “Response” process is available only to the assessed organizations to respect their brand and reputation protection rights. If you want to add your comment as a response to our rating to inform the public, please send your response to reports@iisri.com. If appropriate, we will publish “your response”, on the rating page of your organization without modifications.

Finally, the complaint process is available for all other type of requests. Please send your response to contact@iisri.com or use our contact form.

To initiate the Corrections or Response process, please send us an email to reports@iisri.com and include the following information:
for Corrections: subject has to contain the word “CORRECTIONS” and a report license number. In the message please put the location of the inaccurate statement (page and line number). Provide also the information that is accurate in your opinion by referencing to or attaching evidence and finally your argumentation. For external security ratings, you can only refer to publicly available information. for Response: subject has to contain the word “RESPONSE” and a report license number. In the message please put your response which you want to be published on our website (on your organization rating page).

7. Disclaimer

IISRI® DOES NOT GUARANTEE THE ACCURACY, COMPLETENESS, TIMELINESS OR AVAILABILITY OF ANY INFORMATION OR CONTENT INCLUDING RATINGS AND RELATED MATERIALS, AND IS NOT RESPONSIBLE FOR ANY ERRORS OR OMISSIONS, REGARDLESS OF THE CAUSE, OR FOR THE RESULT OBTAINED FROM THE USE OF SUCH INFORMATION. IISRI® RATINGS ARE STATEMENTS OF OPINION, NOT STATEMENTS OF FACTS OR RECOMMENDATIONS TO USE/BUY SERVICES OR COOPERATE WITH ORGANIZATIONS. THEREFORE, IISRI® GIVES NO EXPRESS OR IMPLIED WARRANTIES TO YOU (OR ANY OTHER PERSON OR ENTITY) OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE OR USE. ANY INFORMATION OR MATERIAL ON THE WEBSITE MAY INCLUDE INACCURACIES OR OTHER ERRORS.

IN NO EVENT SHALL IISRI® OR OUR STAFF BE LIABLE, WHETHER IN CONTRACT, WARRANTY, TORT (INCLUDING NEGLIGENCE), OR ANY OTHER FORM OF LIABILITY, FOR ANY DIRECT, INDIRECT, INCIDENTAL, EXEMPLARY, COMPENSATORY, PUNITIVE, SPECIAL OR CONSEQUENTIAL DAMAGES, COSTS, EXPENSES, LEGAL FEES, OR LOSSES (INCLUDING, WITHOUT LIMITATION TO DEFAMATION, REPUTATION LOST, INCOME LOST OR PROFITS LOST AND OPPORTUNITY COSTS OR LOSSES CAUSED BY NEGLIGENCE). THE LIMITATIONS ON OUR LIABILITY TO YOU OR ANY PARTY SHALL APPLY WHETHER OR NOT IISRI® OR OUR STAFF HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES OR DAMAGES ARISING. ALL INFORMATION AND MATERIALS ON THE WEBSITE ARE PROVIDED ON AN "AS IS" BASIS.

IISRI® RATINGS ARE STATEMENTS OF OPINION EXPRESSED BY SECURITY EXPERTS. ANYONE CAN BUILD HIS RATING FRAMEWORK, WHICH MAY LEAD TO DIFFERENT OPINIONS. FURTHER, IT WOULD BE RECKLESS FOR ANYONE TO MAKE ANY DECISION BASED ON IISRI® RATINGS. IF YOU HAVE ANY DOUBTS YOU SHOULD CONTACT YOUR SECURITY OR OTHER PROFESSIONAL ADVISER.

AS SOME LEGAL JURISDICTIONS DO NOT ALLOW SOME OF THE EXCLUSIONS OR LIMITATIONS AS ESTABLISHED ABOVE, SOME OF THESE EXCLUSIONS OR LIMITATIONS MAY NOT APPLY TO YOU. IN THAT EVENT, YOU ARE NOT ALLOWED TO USE ANY INFORMATION OR MATERIALS ON THE WEBSITE AND YOU ARE OBLIGED TO LEAVE THE WEBSITE.

8. Legal Jurisdiction

Independent Information Security Rating Institute Ltd. is a New Zealand registered company. These terms and conditions and the IISRI® website is governed in all respects by the laws of New Zealand.