Refresh

This website www.aimplas.net/legal-information/information-security-policy/ is currently offline. Cloudflare's Always Online™ shows a snapshot of this web page from the Internet Archive's Wayback Machine. To check for the live version, click Refresh.

Select Page

AIMPLAS establishes its Information Security Policy with the objective of ensuring the confidentiality, integrity, and availability of critical information necessary for the development of its services. This policy provides a framework for risk management and sets guidelines for the secure handling of information, following legal and regulatory standards, including the requirements of ISO/IEC 27001:2022.

Key Principles of the Policy:

  • Comprehensive Scope: The policy applies to all AIMPLAS personnel and related third parties, ensuring information is protected in any form and on any medium.
  • Ongoing Risk Management: AIMPLAS maintains an up-to-date system for risk analysis and management, which minimizes threats and protects both organizational and third-party data.
  • Organization and Roles: Information security is a shared responsibility between the Security Committee and specific management roles. This team regularly monitors and reviews security protocols.
  • Control and Auditing: Internal and external audits are conducted to ensure compliance with this policy, adopting monitoring measures in accordance with current legislation.
  • Commitment to Compliance and Continuous Improvement: AIMPLAS reviews this policy annually and promotes employee training to maintain security and regulatory compliance in the use of its information systems.

This policy is accessible to AIMPLAS personnel and stakeholders, reflecting the organization’s commitment to information security and to the continuous improvement of its data and service protection.