{"id":31545,"date":"2024-10-29T17:45:43","date_gmt":"2024-10-29T17:45:43","guid":{"rendered":"http:\/\/itbid.com\/?page_id=31545"},"modified":"2024-11-10T18:16:47","modified_gmt":"2024-11-10T18:16:47","slug":"information-security-and-business-continuity-policy","status":"publish","type":"page","link":"https:\/\/staging.itbid.com\/en\/information-security-and-business-continuity-policy\/","title":{"rendered":"Information Security and Business Continuity Policy"},"content":{"rendered":"

Itbid is aware that the security of information related to our customers is a critical resource, and has established an Information Security Management System in accordance with the requirements of the ISO\/IEC 27001:2022 standard to ensure the continuity of information systems, minimize the risk of damage, and ensure the fulfillment of the set objectives.<\/span><\/p>\n

The objective of the Security Policy is to establish the necessary framework to protect information resources from internal or external, deliberate or accidental threats, in order to ensure the confidentiality, integrity, and availability of information.<\/span><\/p>\n

The effectiveness and implementation of the Information Security Management System is the direct responsibility of the Information Security Committee, which is responsible for the approval, dissemination, and compliance with this Security Policy. A Responsible Person for the Information Security Management System has been appointed in its name and representation, who has sufficient authority to play an active role in the Information Security Management System, overseeing its implementation, development, and maintenance.<\/span><\/p>\n

The Information Security Committee will proceed to develop and approve the risk analysis methodology used in the Information Security Management System.<\/span><\/p>\n

Any person whose activities may, directly or indirectly, be affected by the requirements of the Information Security Management System is obligated to strictly comply with the Security Policy.<\/span><\/p>\n

At Itbid, all necessary measures will be implemented to comply with applicable regulations on security in general and IT security, related to IT policies, building and facility security, and the behavior of employees and third parties associated with Itbid in the use of IT systems. The necessary measures to ensure information security through the application of standards, procedures, and controls should ensure the confidentiality, integrity, and availability of information, essential for:<\/span><\/p>\n