GIS Policy

Information Security Management System Policy

The Information Security Management System of TIMIA its subsidiaries (belonging to the APPLIED AI S.L. group) has as its fundamental objective the protection of information, offering its employees, customers, and suppliers a secure working environment through appropriate security measures and operational processes.

The principles of our information security policy are:

• Confidentiality: The information should be known only to authorized persons.
• Integrity: Information shall be complete, accurate, valid, and free from manipulation at all times.
• Availability: The information will always be accessible to authorized users at all times and its persistence will be guaranteed in the event of any eventuality.

At TIMIA aware that our technology and business consulting services require adequate protection and management in order to ensure continuity of our services and minimize any potential damage caused by information security breaches.

To this end, we have made the following commitments:

• Timia's ongoing commitment to information security management will be demonstrated through training and awareness programs that foster participatory management in these areas. This approach will enable staff skills to be utilized for the continuous improvement of both the production process and security.
• To ensure that our activities are carried out in accordance with applicable rules and regulations, we will comply with current legislation and regulations, as well as other requirements agreed upon with our customers, including those relating to information security and data protection.
• Comply with requirements and continuously improve the effectiveness of the Information Security Management System by implementing systems for measuring and monitoring the services provided to our customers, as well as security objectives.
• Conduct and periodically review a risk analysis based on recognized methods that allow us to establish the level of information security and minimize risks through the development of specific policies, technical solutions, and contractual agreements with specialized organizations.
• TIMIA's staff will carry out their work focused on achieving the set objectives and, at all times, in accordance with legal and client requirements.
• Selection of employees, suppliers, and subcontractors based on information security criteria.
• Any incident or weakness that could compromise or has compromised the confidentiality, integrity, and/or availability of information must be recorded and analyzed in order to apply the appropriate corrective and/or preventive measures. Likewise, the interested parties will be notified within the corresponding time frames.