GoPro’s Information Security Policy was originally approved by the Board in September 2015 and has since been regularly reviewed and updated as part of GoPro’s Information Security Management System (ISMS), in accordance with the applicable ISO/IEC 27001 requirements and subsequent versions of the standard.

The policy and supporting security controls are continuously maintained to reflect changes in technology, information-security risks, regulatory requirements, customer requirements and recognised good practice. The current approved version is maintained through GoPro’s formal document and version-control process.

GoPro’s Information Security Management System is independently certified to ISO/IEC 27001.

• ISMS DOC 5.1 – Information Security Policy
• ISO 27001 IS 644942 Certificate
• GoPro Cyber Essential Certificate