Information Governance and Security
The Company prioritizes data protection and cybersecurity. Our IT Department is responsible for overseeing and reporting on our adherence to ISO/IEC 27001 standards, ensuring all personnel correctly handle, access, and utilize information.
Personal Data Protection Committee Structure
The Company has formally established a Personal Data Protection Committee, chaired by the Chief Executive Officer. The Committee is entrusted with the responsibility of formulating and implementing measures to ensure the security and integrity of personal data. Furthermore, it is tasked with developing comprehensive data protection practices applicable to all employees and relevant stakeholders. The Committee also oversees the communication and enforcement of these practices to ensure full compliance with the Company’s strategic objectives.
Data Security Strategy
The Company has therefore established an operational strategy to manage the risks of data leakage and cyberattacks. This strategy focuses on reducing both the likelihood of such incidents occurring and the impact of their consequences, as follows:
