C E R T I F I C A T E Management system as per ISO/IEC 27001 : 2013 In accordance with TÜV NORD CERT procedures, it is hereby certified that Information Services Plc. 2, Panayot Volov str. 1504 Sofia Bulgaria with the locations / sites according to the annex applies a management system in line with the above standard for the following scope Design, development, installation, implementation, maintenance and support of modern information systems, including spatial data systems and mobile platforms; Design, development, installation and maintenance of local and global networks and communications systems and network software; Construction and maintenance of national and regional databases and electronic records; Provision of certification services based on public key infrastructure (PKI); Provision of consultancy services in the field of software, hardware and information technology, including business analysis and business process modelling; Construction and maintenance of LAN and WAN with a high degree of securityand protection; Training and qualification; Service and assembly of computers; Commercial activities with software, computer and communication equipment, peripherals and consumables; Complex services for the public administration and corporate clients in the areas of information technology, development and implementation of administrative IT systems, electronic administrative services and electronic mobile services for eGovernance; Providing information and services on its own and customer databases, including spatial data systems and mobile platforms; Providing consultancy services in the field of information technologies and information security, legal advice, legal analysis and drafting legislation proposals; Management of information systems projects; Renting of own movable and immovable property. As per the Statement of Applicability of 04.03.2015 (version 5) Certificate Registration No. 44 121 101474 Valid from 2016-08-31 Audit Report No. 3595 0406 Valid until 2019-08-30 Initial certification 2010 Certification Body Plovdiv, 2016-08-01 at TÜV NORD CERT GmbH This certification was conducted in accordance with the TÜV NORD CERT auditing and certification procedures and is subject to regular surveillance audits. TÜV NORD CERT GmbH Langemarckstraße 20 45141 Essen www.tuev-nord-cert.com A N N E X to Certificate Registration No. 44 121 101474 ISO/IEC 27001 : 2013 Information Services Plc. 2, Panayot Volov str. 1504 Sofia Bulgaria Scope Design, development, installation, implementation, maintenance and support of modern information systems, including spatial data systems and mobile platforms; Design, development, installation and maintenance of local and global networks and communications systems and network software; Construction and maintenance of national and regional databases and electronic records; Provision of certification services based on public key infrastructure (PKI); Provision of consultancy services in the field of software, hardware and information technology, including business analysis and business process modelling; Construction and maintenance of LAN and WAN with a high degree of security and protection; Training and qualification; Service and assembly of computers; Commercial activities with software, computer and communication equipment, peripherals and consumables; Complex services for the public administration and corporate clients in the areas of information technology, development and implementation of administrative IT systems, electronic administrative services and electronic mobile services for eGovernance; Providing information and services on its own and customer databases, including spatial data systems and mobile platforms; Providing consultancy services in the field of information technologies and information security, legal advice, legal analysis and drafting legislation proposals; Management of information systems projects; Renting of own movable and immovable property. As per the Statement of Applicability of 04.03.2015 (version 5) Certificate Location Certificate Location Registration No. Registration No. 44 121 101474-001 Information Services Plc – 44 121 101474-004 Information Services Plc – Central Headquarters branch Varna Sofia, 2, Panayot Volov str. Varna, 191, Slivnitsa blvd. Sofia, 13, Lachezar Stanchev str. Bulgaria Bulgaria 44 121 101474-002 Information Services Plc – 44 121 101474-005 Information Services Plc – branch Blagoevgrad branch Veliko Tarnovo Blagoevgrad, 38, Dame Gruev str. Veliko Tarnovo, Bulgaria 61, Nikola Gabrovski str. Bulgaria 44 121 101474-003 Information Services Plc – 44 121 101474-006 Information Services Plc – branch Burgas branch Vidin Burgas, 3, Yanko Komitov str. Vidin, 42, South Industrial Area Bulgaria Bulgaria TÜV NORD CERT GmbH Langemarckstraße 20 45141 Essen www.tuev-nord-cert.com Page 1 of 3 A N N E X to Certificate Registration No. 44 121 101474 ISO/IEC 27001 : 2013 Certificate Location Certificate Location Registration No. Registration No. 44 121 101474-007 Information Services Plc – 44 121 101474-013 Information Services Plc – branch Vratsa branch Montana Vratsa, 135, Hristo Botev blvd. Montana, 2, Nikola Vaptsarov str. Bulgaria Bulgaria 44 121 101474-008 Information Services Plc – 44 121 101474-014 Information Services Plc – branch Gabrovo branch Pazardzhik Gabrovo, 65, Aleko Konstantinov str. Pazardzhik, 20, K. Velichkov str. Bulgaria Bulgaria 44 121 101474-009 Information Services Plc – 44 121 101474-015 Information Services Plc – branch Dobrich branch Pernik Dobrich, 84, September 25th blvd. Pernik, 2, Otets Paisii str. Bulgaria Bulgaria 44 121 101474-010 Information Services Plc – 44 121 101474-016 Information Services Plc – branch Kardzhali branch Pleven Kardzhali, 3, Ekzarh Yosif str. Pleven, 10A, Ivan Vazov str. Bulgaria Bulgaria 44 121 101474-011 Information Services Plc – 44 121 101474-017 Information Services Plc – branch Kyustendil branch Plovdiv Kyustendil, 2a, Dobrudzha str. Plovdiv, 59, Sankt Peterburg blvd. Bulgaria Bulgaria 44 121 101474-012 Information Services Plc – 44 121 101474-018 Information Services Plc – branch Lovech branch Razgrad Lovech, 56, Dr. Saiko Saev str. Razgrad, 15, Beli Lom str. Bulgaria Bulgaria TÜV NORD CERT GmbH Langemarckstraße 20 45141 Essen www.tuev-nord-cert.com Page 2 of 3 A N N E X to Certificate Registration No. 44 121 101474 ISO/IEC 27001 : 2013 Certificate Location Certificate Location Registration No. Registration No. 44 121 101474-019 Information Services Plc – 44 121 101474-024 Information Services Plc – branch Ruse branch Targoviste Ruse, 16, Tsarkovna nezavizimost str. Targoviste, Bulgaria 51, Mitropolit Andrei blvd., floor 3 Bulgaria 44 121 101474-020 Information Services Plc – 44 121 101474-025 Information Services Plc – branch Silistra branch Haskovo Silistra, 75, Shar planina str. Haskovo, 152, Bulgaria blvd. Bulgaria Bulgaria 44 121 101474-021 Information Services Plc – 44 121 101474-026 Information Services Plc – branch Sliven branch Shumen Sliven, 5, Bansko shose str. Shumen, 47, Veliki Preslav blvd. Bulgaria Bulgaria 44 121 101474-022 Information Services Plc – 44 121 101474-027 Information Services Plc – branch Smolyan branch Yambol Smolyan, 9, Bulgaria blvd. Yambol, 20, Zlaten rog str. Bulgaria Bulgaria 44 121 101474-023 Information Services Plc – branch Stara Zagora Stara Zagora, 5, Armeiska str. Bulgaria -End of the List- Certification Body Plovdiv, 2016-08-01 at TÜV NORD CERT GmbH TÜV NORD CERT GmbH Langemarckstraße 20 45141 Essen www.tuev-nord-cert.com Page 3 of 3.