The organization recognizes information security as a strategic element for the protection of its operations, the trust of its clients, and the fulfillment of its obligations.

Management establishes, implements, and maintains an Information Security Management System (ISMS) based on a risk management approach, in order to protect information according to its value, criticality, and associated risks.

The organization is committed to:

This policy is complemented by the ISMS normative framework, which includes specific policies, procedures, standards, guidelines, and associated records necessary for the implementation, operation, and continuous improvement of information security.

This normative framework is documented, version-controlled, and managed as documented information of the ISMS, and compliance is mandatory for all personnel and third parties acting on behalf of the organization.