Information Security Policy

At JCM TECHNOLOGIES SAU, as an entity included in the corporate Information Security Management System of JCM DIGITAL BUILDING SLU, we adopt and apply this Information Security Policy, approved at corporate level and applicable to the entities within its scope.

Information security is an essential element to ensure the continuity, reliability and protection of the services, processes, systems and information assets used by the organization, as well as to preserve the trust of customers, employees, suppliers, partners and other interested parties.

The corporate Information Security Management System aims to protect the confidentiality, integrity, availability, authenticity and traceability of information, in accordance with applicable legal, regulatory, contractual and normative requirements, including those associated with ISO/IEC 27001, NIS2 and, where applicable, the National Security Framework (ENS).

This policy applies to JCM DIGITAL BUILDING SLU, JCM TECHNOLOGIES SAU, E3A TECHNOLOGIES SAU and ACCESOR APLICATIONS AND SERVICES SAU, within the scope defined for the corporate ISMS.

To this end, the organization commits to:

• Protect information and the systems that process it against unauthorized access, improper alterations, losses, unavailability or unauthorized use.
• Establish technical, organizational and procedural measures proportionate to the identified risks and the organization’s context.
• Manage information security risks systematically, considering threats, vulnerabilities, legal requirements and the needs of interested parties.
• Define roles, responsibilities and authorities regarding information security, ensuring appropriate coordination among the entities within scope.
• Promote staff awareness, training and participation in complying with internal security rules.
• Properly manage security incidents by establishing mechanisms for detection, communication, response, recovery and lessons learned.
• Ensure continuity of critical services and processes through prevention, resilience and recovery measures for contingencies.
• Comply with applicable regulations on personal data protection, information security, cybersecurity and any other applicable legal, contractual or regulatory obligations.
• Continuously review and improve the Information Security Management System, its policies, procedures, controls and objectives.

Corporate Management of JCM DIGITAL BUILDING SLU assumes leadership and commitment to information security, providing the necessary resources for the implementation, maintenance and continuous improvement of the corporate ISMS.

All personnel, partners and third parties who access information, systems or services within scope must comply with the security policies, standards and procedures established by the organization.

This policy is available to relevant interested parties and will be reviewed periodically to ensure its suitability to the context, risks, objectives and applicable requirements.

For any questions or enquiries, you can contact us by email at admin@jcm-tech.com.