INFORMATION SECURITY POLICY
ZERINTIA considers it essential to guarantee information security in all its aspects (integrity, confidentiality, availability, etc.) as well as the security of the processes, infrastructure, people, and other resources involved in the provision of the company's services. In order to be a benchmark company in its sector, it must properly manage corporate security: protecting these elements from potential threats, minimizing risks, and ensuring the continuity of its business processes.
In the current context, the protection of corporate information and the elements that process it are particularly important. These assets are critical to the organization and must therefore be kept reasonably safe from any threat that could pose a risk to them. Information security must be guaranteed at all times in accordance with the relevant legal, organizational, and technical principles.
Therefore, protecting information and maintaining its security becomes a global objective that must be embraced by each and every member of the company. In this way, each and every one of us must be familiar with and comply with the information security policy, procedures, regulations, standards, and recommendations that implement it.
To this end, the following basic principles of ZERINTIA's Security Policy are established:
- Comply with the legal and contractual requirements applicable to the performance of their duties within the organization. In particular, and for the purposes of this policy, in matters related to the protection of personal data and corporate information and the continuity of business processes.
- Restrict the use of both the information itself and the systems that process it and are owned by ZERINTIA to those tasks necessary for the proper performance of each employee's work.
- Maintain the confidentiality of company information and not disclose it to third parties. Exceptionally, it may be communicated in cases where it is essential for business reasons, and always under the relevant security measures.
- Create and maintain an Information Security Management System, which includes the policies, regulations, procedures, and alignments necessary to transfer security requirements to the different areas of the organization in order to protect ZERINTIA's information and assets.
ZERINTIA's management is committed to taking the necessary measures to implement, maintain, and continuously improve the Information Security Management System, as well as to comply with the applicable information security requirements. To this end, this Security Policy is made public, communicated internally to the entire organization, and made available to interested parties.
Failure to comply with this security policy, guidelines, or applicable legislation in each case will result in the adoption of the corresponding legal or disciplinary measures, as defined by ZERINTIA.
For further information, please do not hesitate to contact us at info@zerintia.com.