Information Security Policy
This is a translation for information purposes. In case of discrepancy, the Spanish version prevails.
We are a company specialising in the information systems that support the implementation of technology services and solutions.
This has led ELTERNATIVA OPEN CONSULTING, S.L. (hereinafter, EOC) to implement and maintain an Information Security Management System (ISMS), to guarantee customers and suppliers that the shared information is securely protected, and to offer them a service that is as secure as possible from the point of view of information security.
ELTERNATIVA OPEN CONSULTING, S.L. establishes its Information Security Policy, which is based on the practice of the following values:
1.Responsibility
Ensure that business activities are carried out within the framework of sustainability and accountability to stakeholders and to society as a whole.
2.Customer focus
Provide the highest level of compliance with requirements and exceed the expectations entrusted to the company by customers and stakeholders, while also safeguarding the information they provide to us.
3.Professionalism
Provide the highest technical and personal knowledge for all the projects our customers entrust to us.
4.Confidentiality
Take the utmost care in the use of entrusted data that could be used for illegitimate purposes.
5.Security
Provide the highest level of compliance with requirements and exceed the expectations entrusted to the company by customers and stakeholders, while also safeguarding the information they provide to us.
6.Personal integrity
Provide the highest technical and personal knowledge for all the projects our customers entrust to us.
7.Infrastructure
Setting up and managing the technology equipment, applications and tools required to ensure that information is preserved and kept safe.
8.Continuous improvement
Have a real commitment to continuous improvement and the effective management of business processes.
9.Profitability
Ensure the economic and financial viability of the company as a result of achieving business objectives and improving productivity.
Management will establish, within the General policy of EOC, the plans and resources needed to achieve the objectives set in this policy. EOC undertakes to promote understanding and dissemination of our policy within our organisation, through training and continuous communication with our workers and collaborators. This Policy provides a framework of reference for setting and reviewing the objectives of the Quality and Information Security system; it is communicated to the entire Organisation, made available to all stakeholders and reviewed annually to ensure it remains adequate when considered necessary.