Share

EverySWS is committed to protecting information against all threats (internal, external, deliberate or accidental) and during every stage of the processes carried out by the Organization. Commitment to the pursuit of Information Security objectives is achieved by implementing the Information Security Management System in accordance with the requirements of the ISO/IEC 27001:2022 Standard, integrating a process of continuous improvement of the Management System.

In this regard, management is committed to:

• Ensure that the Information Security Policy and Information Security objectives are established and compatible with the strategic direction of the Organization;
• Ensure the integration of Information Security Management System requirements into the Organization's processes;
• Ensure that the necessary resources for the Information Security Management System are available;
• Communicate the importance of effective management of Information Security and compliance with Information Security Management System requirements;
• Ensure that the Information Security Management System achieves its intended results;
• Direct and support people to contribute to the effectiveness of the Information Security Management System;
• Promote continuous improvement.

With the implementation of the ISO/IEC 27001 Standard, EverySWS aims to:

• Protect information against any unauthorized access while maintaining its confidentiality;
• Ensure that information is available when needed;
• Maintaining the integrity of information;
• Meet legislative and regulatory requirements.

To ensure the achievement of these goals, EverySWS identifies risks that may affect these goals, taking into account the context in which it operates and the needs and expectations of stakeholders, as well as relevant legal, regulatory and contractual requirements.

Management ensures the dissemination and enforcement within the Organization of this Policy through:

• Ongoing training of employees;
• periodic review (at least annually and if changes are detected within the Organization or in the context in which it operates) of the Management System and the Policy itself in order to ascertain its suitability, adequacy and effectiveness;
• A constant and extensive process aimed at planning, scheduling and conducting internal audits;
• periodic analysis of the activities actually carried out, in order to identify all potential risks and implement appropriate protective measures for the purpose of ensuring Information Security.