Information Security Policy

The fundamental objective of Inercia Digital’s Information Security Management System is the protection of information, offering its staff, clients, and providers a secure working environment through appropriate security measures and operational processes.

The principles of our information security policy are:

• The principles of our information security policy are:
• Integrity: The information will at all times be complete, accurate, valid, and free from manipulation.
• Availability: The information will always be accessible by authorised persons at all times, and its persistence will be guaranteed in the face of any eventuality.

At Inercia Digital, we are aware that our training and innovation services require appropriate protection and management in order to ensure the continuity of our services and to minimise potential damage caused by failures in information security.

To this end, we undertake the following commitments:

• The permanent commitment of Inercia Digital regarding information security management will be demonstrated through training and awareness programmes that promote participatory management in these areas, enabling staff skills to be used for the continuous improvement of both the production process and security.
  
• To guarantee the development of our activities within the applicable regulations and standards, compliance will be given to the legislation and regulations in force, as well as to other requirements signed with our clients, including those referring to information security and data protection.
  
• To comply with the requirements and continuously improve the effectiveness of the Information Security Management System, through the implementation of measurement and monitoring systems for services, as well as security objectives.
  
• To conduct and periodically review a risk analysis based on recognised methods that allow us to establish the level of information security and minimise risks through the development of specific policies, technical solutions, and contractual agreements with specialised organisations.
• Inercia Digital staff will carry out their work oriented towards achieving the set objectives and in accordance, at all times, with legal requirements, as well as those of the client.
  
• Selection of staff, providers, and subcontractors based on information security criteria.
• Any incident or weakness that may compromise or has compromised the confidentiality, integrity, and/or availability of the information will be recorded and analysed to apply the corresponding corrective and/or preventive measures. Likewise, they will be communicated to the interested parties within the corresponding timeframes.