Information Security Policy

Information Security is a top priority in order to:

To ensure full compliance of the company with the relevant legal and regulatory requirements,
To protect the interests of the company and those who deal with it and trust it for the use and handling of their confidential data
To ensure the availability, integrity and confidentiality of information generated, received and circulated in the context of security projects.
To maximize the reliability of the company’s information resources.

The implementation of SDAP aims at the following:

Protection of the stored file, the computing resources and the circulating information in the company’s services from any threat, internal or external, intentional or accidental,
Systematic assessment and evaluation of the risks related to the assurance of information, looking forward to their correct and timely management,
Archiving data, avoiding viruses and external intrusions, controlling access to systems, recording all security incidents and managing unexpected developments,
Constantly informing management and staff on information security issues and conducting training seminars for staff,
Full commitment of the company’s Management to the faithful implementation and continuous improvement of the SDAP, which complies with the requirements of the ISO 27001:2013 standard.

The Information Security Management Officer is responsible for controlling and monitoring the operation of the SDAP, as well as for informing all involved personnel about the Information Security Policy.

All personnel involved in the activities and procedures described and related to Information Security have the responsibility to apply the policy and the corresponding Procedures of the SDAP in their area of ​​work.

The Management and all employees are committed to the achievement of the company’s goals and to the observance of the principles in relation to Information Security.

In order to achieve the above, the Company implements an Information Security Management System according to EN ISO 27001:2013 standard.

THE ADMINISTRATION