Nike has achieved ISO 27001:2022 compliance certification, ensuring data and information security in the provision of all services.

Information is a resource that, like other business assets, is essential to Nike's operations and, therefore, must be adequately protected.

This aspect is particularly important given the growing interconnectedness of business environments. This growing interconnectivity means that information is now exposed to a growing number and wider variety of threats and vulnerabilities.

The Policy directs information security management within Nike Web Consulting to ensure adequate levels of security for information stored and transmitted via information technology, taking into account legal requirements and effective risk management.

The information security policy is defined in accordance with international standards (e.g., ISO/IEC 27001) and regulations relating to information security management practices, organizational risk aspects, and related business requirements.

Nike Web Consulting guarantees an adequate level of information protection in terms of:

• • Confidentiality, ensuring that information is accessible only to authorized users;
• • Integrity, safeguarding the completeness, accuracy, and compliance of information during acquisition, storage, processing, and sharing;
• • Availability, ensuring that authorized users have access to the information they need to perform their tasks.