Last updated: April 2, 2025
AUTANA BUSINESS PARTNERS SL, a company dedicated to providing support services for our clients' business processes with the appropriate technologies, seeking to optimise processes in the areas of consulting specialised in customer-management technologies, in the services of Analytics, Customer Engagement, Digital Marketing, Data Management, Cloud Computing and Training, covering all of the company's channels and points of interaction with its customers, has decided to implement an Information Security Management System based on the ISO 27001 standard, with the aim of preserving the confidentiality, integrity and availability of information and protecting it from a wide range of threats. This Management System is intended to ensure the continuity of the lines of business, minimise damage, maximise the return on investments and business opportunities, and drive continuous improvement.
The Management of AUTANA BUSINESS PARTNERS SL is aware that information is an asset of great value to the Organisation and therefore requires adequate protection.
The Management of AUTANA BUSINESS PARTNERS SL sets the following as the basic objectives, starting point and support for the objectives and principles of information security:
- The protection of personal data and the privacy of individuals
- The safeguarding of the organisation's records
- The protection of intellectual property rights
- The documentation of the information security policy
- The assignment of security responsibilities
- Training and awareness in information security
- The recording of security incidents
- Business continuity management
- The management of changes in the company that relate to security
The Management of AUTANA BUSINESS PARTNERS SL, through the preparation and implementation of this Information Security Management System, undertakes the following commitments:
- To develop products and services that comply with legal requirements, identifying for this purpose the legislation applicable to the lines of business carried out by the organisation and included in the scope of the Information Security Management System.
- To establish and comply with contractual requirements with interested parties.
- To define security training requirements and provide the necessary training in this area to interested parties through the establishment of training plans.
- To prevent and detect viruses and other malicious software, by developing specific policies and establishing contractual agreements with specialised organisations.
- To manage business continuity by developing continuity plans that follow internationally recognised methodologies.
- To establish the consequences of breaches of the security policy, which will be reflected in the contracts signed with interested parties, suppliers and subcontractors.
- To act at all times within the strictest professional ethics.
This Policy provides the frame of reference for the continuous improvement of the Information Security Management System and for establishing and reviewing its objectives. It is communicated to the whole Organisation through the document management system installed in the organisation and by posting it on information boards, and is reviewed annually for suitability and extraordinarily whenever special situations and/or substantial changes arise in the Information Security Management System. It is available to the general public.