Information Security Policy

ARBENTIA CONSULTING, S.L.U. (ARBENTIA) is an international business consulting and information technology firm, whose mission is to assist companies in their digital transformation processes. These processes guide the strategy, culture, processes, and capabilities of an organization to channel the disruption created by the digital economy.

ARBENTIA has implemented and maintains an Information Security Management System (ISMS) based on the ISO 27001 Standard, which has been approved and is driven by the company’s Management, for: The information systems that support business process digitization activities and managed services for companies on a cloud technology platform.

The principles that must be respected in our ISMS are:

    • Confidentiality: Information must be known exclusively by authorized persons.
    • Integrity: Information must be complete, accurate, valid, and not subject to manipulation.
    • Availability: Information must be accessible by authorized users at all times and ensure its persistence in the face of any eventuality.

Information security must be flexible, effective, and support the company’s business model. This means:

    • Access to information must be controlled and based on the person’s role in the organization.
    • The services provided must be secure from any access point when connecting to the company’s infrastructure.
    • Security measures must ensure the requirements of confidentiality, integrity, and availability of information and services, as well as the privacy of personal data in accordance with current legislation.

The ISMS establishes the framework to approve information security objectives and provides the necessary means to maintain a policy of continuous improvement.

Our ISMS establishes the minimum requirements to ensure the continuity of operations.

From ARBENTIA’s Management, a commitment is made to comply with all applicable legal requirements, as well as other requirements that may be committed to, always ensuring the security of the information handled.