Security Policy | INVELON

Security Policy

Mission

To meet the needs of our clients in the private and public sectors in terms of 4.0 technologies, promoting actions that contribute to the development of their business, achieving the best results and delivering value for society as a whole.

Commitment to security

INVELON ensures the proper management of information security in order to protect its confidentiality, integrity, availability, authenticity and traceability. The company is committed to preventing incidents and guaranteeing the continuity of its services.

Scope

The policy applies to all ICT systems and to personnel involved in public sector projects that must comply with the National Security Framework (ENS).

Security objectives

To increase resilience to incidents, ensure the rapid recovery of services and mitigate information security risks.

Regulatory framework

INVELON complies with a range of regulations, such as the European General Data Protection Regulation (GDPR) and Spanish data protection and information security laws.

Security organisation

Management is responsible for providing the resources needed to meet the security objectives. Specific roles are assigned, such as the Security Officer and the Security Committee, which makes key decisions in this area.

Risk management

Systems subject to this policy must carry out a risk analysis annually or whenever significant changes occur. The Security Committee manages these analyses.

Personnel management

All personnel must be trained in information security and sign confidentiality agreements. Annual security awareness sessions are held.

Access control and protection of premises

Security measures are implemented to prevent unauthorised access to systems and to protect critical equipment. Security in the use of mobile devices and in remote working is promoted.

Procurement of products

Security is built into every phase of the life cycle of the systems, from acquisition to decommissioning.

Business continuity

Backup and operational continuity mechanisms are established for incidents that affect the usual means of work.

Continuous improvement

The policy encourages the continuous improvement of the security management system, in line with international standards such as ISO 27001.