Whitehat Logo

Information Security Policy

Information Security is a top priority for WHITEHAT in order to:

 

  • Ensure full compliance with applicable legal and regulatory requirements.

  • Protect the interests of the company and those who conduct business with it and entrust it with the handling and processing of their confidential data.

  • Ensure the availability, integrity, and confidentiality of information generated, received, and exchanged in the course of security-related projects.

  • Maximize the reliability of the company’s information resources.

 

To achieve these objectives, WHITEHAT implements an Information Security Management System (ISMS) in accordance with the EN ISO 27001 standard.

 

The implementation of the Information Security Management System aims to:

 

  • Protect stored records, computing resources, and information processed or transmitted through the company’s services against all threats, whether internal or external, intentional or accidental.

  • Systematically identify, assess, and evaluate information security risks to ensure their appropriate and timely management.

  • Ensure proper data archiving, protection against viruses and external intrusions, access control to information systems, recording of all security incidents, and effective management of unexpected events.

  • Promote continuous awareness among management and employees regarding information security matters and provide relevant training sessions for all personnel.

  • Ensure the full commitment of the company’s Management to the effective implementation and continuous improvement of the ISMS, in compliance with the requirements of ISO 27001:2022.

 

The Information Security Manager is responsible for overseeing and monitoring the operation of the ISMS, as well as ensuring that all relevant personnel are informed about the Information Security Policy.

 

All employees involved in activities and processes related to Information Security are responsible for implementing this Policy and the relevant ISMS procedures within their respective areas of responsibility.

 

The Management and all employees are committed to achieving the company’s objectives and upholding the principles of Information Security.

 

To achieve these objectives, WHITEHAT implements an Information Security Management System in accordance with the EN ISO 27001:2022 standard.