Security policy

Novapraxis Soluciones de Negocio S.L. recognizes that information is one of its most valuable assets, essential for achieving its objectives, providing services, and maintaining the trust of its clients and stakeholders.

Consequently, Management establishes this Information Security Policy, which is appropriate to the organization’s purpose, with the aim of protecting information assets against any threat that could affect their confidentiality, integrity, or availability, and of ensuring management that is effective, responsible, and aligned with the corporate strategy.

This policy provides the framework for establishing information security objectives, which must be consistent with the principles defined here, measurable to the extent possible, and take into account the applicable requirements, as well as the results of the assessment and treatment of risks. The objectives of the Information Security Management System (ISMS) will be monitored, communicated, reviewed and updated as appropriate, and will be available as documented information within the ISMS.

Management commits to complying with all applicable requirements regarding information security, including those derived from the ISO/IEC 27001:2022 standard, current legislation, contractual agreements, and established internal obligations. Furthermore, it commits to fostering the continuous improvement of the Information Security Management System by promoting the active involvement of all personnel, ensuring the necessary resources to guarantee its effectiveness, and upholding a commitment to addressing climate change.

This policy is available as documented information, is communicated internally to all members of the organization, and is disseminated to external stakeholders when appropriate, with the aim of ensuring transparency, awareness, and shared responsibility in the protection of information. It will be reviewed periodically or whenever significant changes occur in the organization’s structure, context, or risks, in order to ensure its continued validity and suitability.