{"id":12924,"date":"2026-10-30T08:51:37","date_gmt":"2026-10-30T07:51:37","guid":{"rendered":"https:\/\/bianna.com\/legals\/security-policy\/"},"modified":"2026-10-30T09:12:48","modified_gmt":"2026-10-30T08:12:48","slug":"security-policy","status":"publish","type":"legals","link":"https:\/\/bianna.com\/en\/legals\/security-policy\/","title":{"rendered":"Security Policy"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">1. Objective<\/h2>\n\n<p class=\"wp-block-paragraph\">The objective of this Statement is to set out the criteria applied at Bianna to protect information system assets, as well as to preserve their confidentiality, integrity and availability.<\/p>\n\n<h2 class=\"wp-block-heading\">2. Scope and Frame of Reference<\/h2>\n\n<p class=\"wp-block-paragraph\">Bianna\u2019s Information Security Policy, based on the international standard ISO\/IEC 27001, is aimed at protecting its information assets and the technology used to process them against internal or external threats, whether deliberate or accidental, in order to ensure business continuity and safeguard the company\u2019s strategic objectives.<\/p>\n\n<p class=\"wp-block-paragraph\">Bianna recognises that information is a critical and highly important factor in carrying out its activity. It therefore establishes policies, procedures and controls to provide a secure processing environment for corporate information and that of its clients, contractors and stakeholders, according to its value, classification and level of risk exposure.<\/p>\n\n<h2 class=\"wp-block-heading\">3. Senior Management Commitment and Continuous Risk Management<\/h2>\n\n<p class=\"wp-block-paragraph\">Bianna is committed to managing information security risks continuously and proactively, at a level that is appropriate and proportionate to the assets to be protected. To this end, Senior Management promotes the implementation, operation, review and continuous improvement of an Information Security Management System (ISMS), audited both internally and externally.Este compromiso garantiza un enfoque sistem\u00e1tico en la adopci\u00f3n de las mejores pr\u00e1cticas y el estricto cumplimiento del marco legal, regulatorio y contractual aplicable.<\/p>\n\n<p class=\"wp-block-paragraph\">This commitment ensures a systematic approach to adopting best practices and to strictly complying with the applicable legal, regulatory and contractual framework.&lt;br\/&gt;<\/p>\n\n<h2 class=\"wp-block-heading\">4. Strategic Security Objectives<\/h2>\n\n<p class=\"wp-block-paragraph\">Bianna\u2019s fundamental objectives regarding information security are:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Risk Management: Identify and manage information security risks, applying the technical and organisational controls required to reduce them to an acceptable level determined by Managemen<\/li>\n\n\n\n<li><strong>Security Culture: <\/strong>Promote awareness of good security practices among employees, contractors, partners and clients.<\/li>\n\n\n\n<li><strong>Trust and transparency:<\/strong> Maintain the trust of our clients and stakeholders by ensuring the secure and confidential processing of the data we manage.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">5. Responsibilities of Employees and Contractors<\/h2>\n\n<p class=\"wp-block-paragraph\">All employees, contractors and stakeholders who access Bianna\u2019s systems undertake to<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Know, apply and comply with the regulatory framework and security procedures defined by the organisation.<\/li>\n\n\n\n<li>Protect the information assets, systems and infrastructure made available to them.<\/li>\n\n\n\n<li>Act responsibly and diligently, ensuring that their actions do not compromise their own security or that of third parties.<\/li>\n\n\n\n<li>Immediately report any incident, suspicious event or vulnerability detected to the security team\/Helpdesk.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">6. Compliance and Oversight<\/h2>\n\n<p class=\"wp-block-paragraph\">Senior Management, together with the ISMS Manager (CISO), shall ensure the application of this Statement. In the event of non-compliance with the security directives, the company reserves the right to take whatever measures it deems necessary in accordance with the applicable regulations and agreements in force.<\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"template":"","class_list":["post-12924","legals","type-legals","status-publish","hentry"],"meta_box":[],"permalink_manager":null,"_links":{"self":[{"href":"https:\/\/bianna.com\/en\/wp-json\/wp\/v2\/legals\/12924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bianna.com\/en\/wp-json\/wp\/v2\/legals"}],"about":[{"href":"https:\/\/bianna.com\/en\/wp-json\/wp\/v2\/types\/legals"}],"wp:attachment":[{"href":"https:\/\/bianna.com\/en\/wp-json\/wp\/v2\/media?parent=12924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}