Information security
Based on the ISO 27001 standard
Rev. 00 · July 2026
01 · INTRODUCTION
Therefore, it decides to implement an Information Security Management System based on the ISO 27001 standard with the aim of preserving the confidentiality, integrity, and availability of information and protecting it from threats. This Management System is designed to ensure the continuity of business lines, minimize damage, maximize return on investment, business opportunities, and continuous improvement.
02 · PRINCIPLES
01
The protection of personal data and individual privacy
02
The safeguarding of the organization's records
03
The protection of intellectual property rights
04
Information Security Policy documentation
05
The allocation of information security responsibilities
06
Information security training and education
07
The logging of security incidents
08
Business continuity management
09
The management of changes that could occur in the company regarding security
03 · COMMITMENTS
The Management of AyronOne, through the development and implementation of this Information Security Management System, undertakes the following commitments:
Information Security Management System
Based on the ISO 27001 standard
Develop services in compliance with legislative requirements, identifying the applicable legislation for the business lines developed by the organization and included within the scope of the Information Security Management System.
Establish and meet contractual requirements with interested parties.
Define the information security training requirements and provide the necessary training on this subject to interested parties through training plans.
Prevent and detect malicious software by developing specific policies and establishing contractual agreements with specialized organizations.
Manage business continuity, developing continuity plans in accordance with internationally recognized methodologies.
Establish the consequences of security policy violations, which will be reflected in the contracts signed with interested parties, suppliers, and subcontractors.
Act in accordance with the strictest professional ethics at all times.
04 · REVIEW
This Policy establishes the framework for the continuous improvement of the Information Security Management System, as well as for the definition, monitoring, and review of its objectives. It is communicated to the entire Organization through its document manager and published in internal media channels, being reviewed annually for its suitability and extraordinarily whenever special situations and/or substantial changes occur in the Information Security Management System, and is available to the general public.
Management
AyronOne · Rev. 00 · July 2026