Information security policy
The information security policy of BDR Informàtica i Comunicacions SL is based on the following principles, commitments and objectives:
- Confidentiality: guarantee that only authorized persons access the information or serve it.
- Integrity: guarantee that the information or service is presented correctly.
- Availability: Meet service requirements.
- Compliance with information security measures, whether documented or not.
- Compliance with customer, legal and regulatory requirements regarding information security
- Continuous improvement.
- Leadership. That the people responsible for people and processes are role models.
- Participation of people. All people have the autonomy and opportunity to participate in the functioning of the Organization.
- Mutually beneficial relationships with customers and suppliers that provide long-term relationships based on trust.
- Based approach:
- In processes. Customer orientation, improvement of internal communication and teamwork.
- System for management. Interrelation between processes.
- In facts for decision making. We measure, analyze and make decisions to try to improve.
This policy adapts to the strategy of the company BDR Informática y Comunicaciones SL
All own and subcontracted persons are responsible for compliance with this policy.
In the event of non-compliance with this policy, sanctioning and disciplinary processes may be triggered, in addition to the resulting civil or criminal liability.
This policy is developed through information security regulations.