Our information security policy

• assessing the level of security of the information processed in order to establish the adequate levels of protection to be ensured; 
• adopting a risk assessment and management process; 
• ensuring the implementation of adequate security measures of a physical, technological and organizational nature in order to provide adequate support for the pursuit of the goals of the integrity, confidentiality and availability of information;  
• ensuring that accidents with repercussions for information security are promptly identified and properly managed through efficient prevention, communication and proactive systems in order to minimize the impact on the business; 
• regularly identifying objectives for improving the organization relating to information security, establishing plans for achieving them and monitoring their implementation, in addition to informing all interested internal parties thereof; 
• guaranteeing the adequacy of the Information Security Management System in the event of changes in the organization’s internal or external environment; 
• ensuring that personnel are aware of information security policies and objectives and of their role in maintaining the efficacy of the system; 
• ensuring that personnel are competent and adequately trained; 
• guaranteeing the implementation of adequate security levels by suppliers, partners, etc.; 
• monitoring and constantly improving the system’s performance and efficacy; 
• ensuring compliance with all rules and regulations applicable to the organization and all contracts entered into, and in particular with national and European legislation governing the protection of personal data.