Information Security Policy

Protecting information and the systems that process it is of strategic importance to the Company, enabling it to achieve its short-term and long-term objectives and ensure the confidentiality of the data of clients receiving its services.

Recognising the critical role of information and information systems in its business operations, the Company implements an Information Security and Digital Resilience Policy with the following objectives:

To safeguard the confidentiality, integrity and availability of the information it manages.
To ensure the proper operation of information systems and applications.
To respond promptly to incidents that may jeopardise its business operations.
To meet legislative and regulatory requirements.
To continually improve the level of Information Security.

For this purpose:

The necessary organisational structures are established to monitor Information Security matters.
A framework is implemented to evaluate the effectiveness of Information Security procedures. It defines performance indicators, describes the measurement methodology and produces periodic reports that are reviewed by Management with the aim of continually improving the system.
The Information Security and Digital Resilience Officer is responsible for controlling and monitoring Information Security policies and procedures, and taking the necessary initiatives to ensure the continuous implementation and improvement of the effectiveness of the Information Security and Personal Data Protection Management System.

Management of TECHMELLON S.A.