Common use of Information Security Management System Clause in Contracts

Information Security Management System. 1. A general security policy has been developed, along with specific security policies regarding organization security, information security, IT system security and security of people and property, all of them defining the basic objectives of the actions related to implementation of the policies. 2. General and specific security standards have been defined that implement the assumptions of the security policies in terms of information security, IT system security, and security of people and property. 3. Specific procedures and operating instructions have been developed for the implementation of the security standards in terms of information security, IT system security, and security of people and property. 4. The policies, standards, procedures, and instructions are subject to periodic reviews and revisions, to be approved by the Company’s top management. 5. A system to monitor changes in personal data processing legislation has been developed and put in place, and the continuity of its operations has been ensured.