Iceland Revenue and Customs is committed to ensuring a high level of information security in all its operations. An information security policy is in place. The policy establishes a framework for protecting the confidentiality, integrity, and availability of information, supporting secure and reliable services while minimizing operational risk.

The policy applies to all information, systems, and activities, including those handled by third parties. The Directorate maintains an information security management system aligned with international standards, ensures compliance with legal and data protection requirements, and promotes strong security awareness among employees. Continuous risk assessment, incident management, and regular reviews support ongoing improvements and resilience against evolving threats.