Security Policy
Security Policy
The Information Security Policy of ARRAM CONSULTORES, S.L. aims to define the principles and basic rules for managing information security in all activities relating to engineering and technical consultancy within the services we provide, in accordance with the current statement of applicability.
To ensure this objective is met, ARRAM CONSULTORES, S.L. has implemented an Information Security Management System based on the UNE-EN ISO 27001 standard.
Our policy is based on the following points:
• To comply with the applicable requirements for information security.
• To continuously improve the information security management system.
• Information must always be protected, regardless of how it is shared, communicated or stored
This Policy provides a framework for establishing our company’s information security objectives:
To guarantee the necessary level of confidentiality for each type of information, in accordance with the classification set out in the Risk Procedure.
To maintain the integrity of the information, so that it remains unchanged from the moment it was generated by its owners or those responsible for it.
To ensure the availability of information, in all formats and whenever necessary, thereby safeguarding business continuity and compliance with all obligations incumbent upon the company.
The company’s management ensures that this Information Security Policy is appropriate to the organisation’s purpose and context and supports its strategic direction; it is communicated, reviewed, understood and applied by all staff with the aim of continuously improving the effectiveness of the Information Security Management System, and it is available to all interested parties.
Compliance with this policy and with any procedures or documentation included within the Information Security Management System is mandatory and applies to all staff within the organisation.
Visitors and external personnel accessing our premises are not exempt from complying with the obligations set out in the IMS documentation, and internal staff shall ensure that these are observed.
Translated with DeepL.com (free version)