Security Policy
Introduction
REVENI's Security Policy reflects the concepts, principles, responsibilities, and objectives regarding security. Its outcomes ensure the company maintains the necessary freedom of action.
The objective of REVENI’s Comprehensive Security is to protect the people working at the company, the confidentiality of its communications, and the integrity and availability of its information. It also safeguards other assets that make up the company's heritage, such as facilities and content of all kinds.
Comprehensive Security encompasses the traditional concepts of physical security and logical (technological) security in order to maintain business continuity under any adverse circumstances.
Increasing a "security culture" among company personnel will provide clear benefits by enhancing the security of systems and procedures, while minimizing the risk of potential malicious actions.
It is essential that all information regarding security matters flows through the appropriate channels toward the company's decision-making bodies.
Principles
- Integration: Global Security is an integrated process aligned with the business, involving the entire company.
- Profitability: Security is guided by business criteria, taking into account the relationship between expenditure and investment. Criteria are set centrally, leveraging any existing synergies. This management allows for a global reduction in costs and better performance of security efforts.
- Continuity: Security must be present throughout its entire work cycle: protection, prevention, detection, response, and recovery.
- Adaptability: The means employed must adapt to the business environment. Among other factors, competition with other companies, social, political, and economic unrest, and amateur or professional hacking are highlighted for their impact on the business and the organization's security levels.
Responsibilities
Ultimate responsibility for security lies with the Leadership Team, which is directly responsible for managing its development and implementation.
The Management Team will analyze security risks and vulnerabilities that could affect the proper functioning of the business and will propose the appropriate standards, means, and measures to minimize them.
All organization personnel must assume responsibility for maintaining the security of the assets under their charge, observing the security regulations implemented by the Management Team.
Objectives
- Achieve and maintain the security level required to adequately guarantee business continuity, even in adverse situations.
- Increase the integration and mutual support of the physical and logical aspects of security.
- Collaborate in the management of other security disciplines, including labor and environmental aspects, following criteria that enhance Corporate Social Responsibility.
- Establish the corporate security structure defined by the organization's decision-making bodies and create appropriate communication channels among all parties involved.
- Comply with official security regulations and other requirements.
- Establish and implement Security Training and Awareness Plans to improve staff expertise.
- Express commitment to continuous improvement.
- Integrate the various company departments into a security management system that, under common criteria, leverages synergies and achieves consistency in resources and actions.
- All REVENI personnel shall know and apply the regulations that develop this Security Policy.
Contact information and inquiries
If you have any questions or need further information, please do not hesitate to contact us:
security@reveni.io