This Information Security Policy applies to all activities of WI DO IT GROUP SL related to document management, as well as to all employees and stakeholders who handle company information. Consequently, Management establishes the following principles:
- We are committed to protecting the confidentiality, integrity, and availability of information, ensuring its protection against unauthorized access, unauthorized modification, unauthorized disclosure, and unauthorized destruction.
- We are committed to complying with all applicable laws, regulations, and standards regarding information security, including ISO 27001:2022 and other relevant standards.
- We identify, classify, and protect information assets that are critical to the company, ensuring their proper management throughout their lifecycle.
- We implement a formal risk management process to identify, evaluate, and treat information security risks with the objective of mitigating or eliminating them.
- We train our personnel in information security and promote a culture of security throughout the organization.
- We establish confidentiality clauses in relevant contracts and with applicable stakeholders.
- We implement physical security and access control measures to protect information assets within company facilities and any other relevant environment.
- We establish procedures to detect, report, investigate, and respond to information security incidents in a timely and effective manner.
- We set objectives to improve information security, defined as preserving confidentiality, availability, and integrity.
- We conduct periodic audits and reviews of the effectiveness of the Information Security Management System to ensure its continuous improvement.
These principles are endorsed by Management, which provides the necessary resources. Likewise, all employees and stakeholders must comply with this policy and actively contribute to the information security of WI DO IT GROUP SL.
Lleida, April 16, 2024
Alejandro Silvestre
