IMDEA Software relies on ICT systems (Information and Communication Technologies) to achieve its objectives. The use of these systems requires establishing guidelines and procedures to address and manage the risks associated with information security that may affect availability, integrity, confidentiality, authenticity, or traceability. The management of information systems security is a complex process that includes people, technologies, standards, and procedures.
This entails the need to establish a series of security measures, required by Real Decreto 311/2022, which regulates the National Security Framework (ENS), as well as the applicable regulations on Data Protection, together with continuous monitoring of service performance levels, reported vulnerabilities, and the preparation of an effective response to incidents, ensuring the continuity of services provided.
To this end, IMDEA Software has implemented a Security Policy to ensure the quality and security of information at IMDEA Software. This policy is mandatory for all users of IMDEA Software services, who must be aware of it, accept it, and comply with it.