Security

General Information Security Policy

Commitment to Information Security

Confidentiality, Integrity, and Availability: the organization is dedicated to safeguarding the confidentiality, integrity, and availability of information processed and stored within its systems, whether owned by the organization, our employees, partners, customers, or suppliers.
Information Security Management System (ISMS): The organization has implemented an Information Security Management System (ISMS) in alignment with ISO 27001 standards, demonstrating our commitment to robust information security practices.

Strategic Alignment: The organization’s management ensures that the information security policy and objectives are in harmony with the strategic direction of the organization.
Integration into Processes: The integration of ISMS requirements into organizational processes is actively managed to strengthen information security.
Roles and Responsibilities: Specific roles and responsibilities are assigned to ensure effective oversight and execution of the ISMS.
Resource Availability: Resources needed for the ISMS are prioritized and made readily available to support its ongoing effectiveness.
Continual Improvement: The organization’s leadership promotes a culture of continual improvement for the ISMS, fostering adaptability to emerging challenges and technological advancements.

Compliance Assurance: The organization is committed to ensuring compliance with relevant information security regulations and meeting the expectations of interested parties.
Cyber Resilience and Continuity: Maintaining cyber resilience and ensuring process continuity are key objectives, reflecting our dedication to uninterrupted business operations.
Risk Management: The organization identifies information security risks and implements measures to reduce them to an acceptable level.

Integral to Every Activity: Information security is integral to every procedure, process, or activity within the organization, reflecting our holistic approach to protecting information assets.
Cyber Resilience and Continuity: Maintaining cyber resilience and ensuring process continuity are key objectives, reflecting our dedication to uninterrupted business operations.
Risk Management: The organization identifies information security risks and implements measures to reduce them to an acceptable level.

Periodic Evaluation: The Information Security Policy undergoes regular assessment, revision, and updating every two years or more frequently, if necessary, to ensure its relevance in response to changing conditions.