Security Information Policy

ISON PSYHOMETRICA collects, stores, processes and distributes information on a daily basis in the context of its business operations. The protection of information and its processing systems is of strategic importance for the company in order to achieve its short and long-term objectives.

Management, recognizing the criticality of information and information systems in the execution of its business functions, supports and promotes actions aimed at ensuring the secure operation of the systems. For this reason, the company has developed and implemented an Information Security Policy targeting the following:

• Ensuring the smooth operation of the information systems that support its activities
• Ensuring the confidentiality, availability and integrity of the information it manages.
• Continuously informing staff about Information Security risks and the best practices they should follow in the performance of their duties.
• Protecting the premises that support the company's activities.
• Systematic assessment and evaluation of information assurance risks with a view to their proper and timely management.
• Compliance with the legal and regulatory requirements to which its operations are subject.
• Immediate response to incidents that may breach Information Security.
• Continuous improvement of the mechanisms for protecting the company's resources.

In order to achieve the above-mentioned objectives, Management:

• Defines organizational structures necessary for monitoring issues related to Information Security.
• Defines technical measures to control and restrict access to information and information systems.
• Defines the way in which information is classified according to its importance and value.
• Describes the necessary measures to protect information at the stages of its processing, storage and circulation.
• Specifies the ways of informing and training the company's employees and partners on information security issues.
• Identifies ways to respond to Information Security incidents.
• Describes the ways in which the safe continuity of companies' business operations is ensured in the event of information systems malfunctioning or disasters.
• Monitors and evaluates the effectiveness of ISON PSYHOMETRICA's resource protection mechanisms.

The company conducts risks assessments related to Information Security at regular intervals and takes the necessary measures to address them. It implements a framework for evaluating the effectiveness of Information Security processes through which performance indicators are defined, and the methodology for measuring. The system shall establish performance indicators, produce periodic reports, and be reviewed by the company's management with a view to continuous improvement of the system.

All employees of ISON PSYHOMETRICA and its partners with access to information and information systems are responsible for compliance with the rules of the applied Information Security Policy.