Information Security Policy

At our organization, information security is a fundamental business priority. We are committed to:

Information Security Policy

Operating and continuously improving our Information Security Management System in full compliance with TS/ISO 27001:2022.

Protecting our information assets by applying industry best practices and maintaining strict controls over the storage, transmission, modification, access, and processing of information, supported by segregation of duties and embedded process controls.

Ensuring the availability, integrity, and confidentiality of all information assets.

Implementing robust physical security measures for assets stored within secure environments.

Proactively identifying, assessing, and managing risks related to information security.

Safeguarding our company’s reliability, credibility, and reputation.

Enforcing appropriate disciplinary and corrective actions in the event of information security breaches.

Establishing the necessary governance structure, resources, and infrastructure to enable timely reporting and swift response to security incidents.

Complying with all applicable national and international regulations, legal and statutory requirements, contractual obligations, and corporate responsibilities towards internal and external stakeholders.

Minimizing the impact of information security threats on business and service continuity, ensuring operational resilience and long-term sustainability.

Conducting regular audits to monitor compliance and drive continuous improvement, with findings reviewed at management level.

Communicating this policy across the organization and providing the necessary resources and training to ensure effective implementation.

Continuously promoting information security awareness among all stakeholders.

Maintaining and further enhancing our information security maturity through a strong and sustainable control framework.

CERTIFICATES

ISO 27001 Information Security Management System Certificate

Personal Data Retention and Destruction Policy in Accordance with Data Protection Legislation (KVK)

Personal Data Protection and Processing Policy