This Policy establishes the operational framework by which Aureon Financial LLC ("Aureon") identifies, mitigates, monitors, and continuously improves controls related to:

• • Protection of Sensitive Data
• • Information Security Governance
• • Technology Infrastructure & Hosting
• • Third-Party & Vendor Security
• • Incident Detection & Response
• • Business Continuity & Disaster Recovery
• • Physical Security (where applicable)

This Policy applies to all employees, officers, contractors, affiliates, and third parties with access to Aureon systems or data.