Information Security Policy

Proximity, quality of service, and a focus on results are our hallmarks; therefore, recognizing the importance of information security, and in keeping with the path defined by our identity, BITBAN TECHNOLOGIES has implemented an Information Security Management System in accordance with the requirements of ISO 27001 and the National Security Framework in order to identify, assess, and minimize the risks to which your information and that of your clients is exposed, as well as to ensure compliance with established objectives.

The main objective of this Security Policy is to establish a framework for action that allows us to develop a corporate culture, a way of working and making decisions at BITBAN TECHNOLOGIES, and to ensure that information security and respect for personal data are a constant priority:

• Preserving the confidentiality and authenticity of our clients’ information, preventing its disclosure and unauthorized access.
  
  
• Maintaining the integrity and traceability of our clients’ information, ensuring its accuracy and preventing its corruption.
  
  
• Ensuring the availability of our clients’ information across all media and whenever necessary.

Management, for its part, places special emphasis on, and establishes as a primary criterion for assessing its risks, the evaluation of the availability and confidentiality of its own information and, even more so, that of its clients. Thus, it is committed to developing, implementing, maintaining, and continuously improving its Information Security Management System (ISMS) with the goal of continuously improving the way we provide our services and the way we handle our clients’ information. Therefore, it is the policy of BITBAN TECHNOLOGIES that:

• Set annual objectives related to information security.
  
  
• Comply with legal, contractual, and business requirements.
  
  
• Training and awareness activities regarding information security processes are conducted for all staff.
  
  
• Develop a process for analyzing, managing, and addressing risks to information assets.
  
  
• Control objectives and corresponding controls are established to mitigate the identified risks.
  
  
• Establish employees’ responsibility for reporting security breaches and for complying with the policies and procedures inherent in the Information Security Management System.

The Security Officer will be directly responsible for maintaining this policy, providing advice and guidance for its implementation, and addressing any deviations from compliance.

This information security policy shall always be aligned with the company’s general policies and with those that serve as a framework for other internal management systems, such as quality and environmental policies.