Information security policy
Our company is committed to maintaining a stable position among the best in providing design and construction work for civil and defense purposes, as well as in the field of design and development of machines and equipment for various industrial sectors. To achieve this, we declare the following principles in our Information Security Policy:
- Our information security policy outlines the basic strategy, objectives, and principles regarding information security, cybersecurity, and privacy protection. It establishes the fundamental security rules for the operation, use, and maintenance of information and communication technologies to ensure the required level of protection and minimize damage caused by current and anticipated information security risks and threats.
- The company's management approves the fulfillment of information security application requirements in accordance with the STN EN ISO/IEC 27001:2023 standard and supports and enforces this information security policy.
- We have adopted a set of information security policies according to the STN EN ISO/IEC 27002:2023 standard, which all employees are familiar with. Responsibilities for information security management are assigned by defining roles within the company.
- Our management is committed to implementing measures that lead to the continuous improvement of the information security management system.
- We regularly monitor and evaluate information security objectives, focusing on the following areas:
- Compliance with legislative requirements relevant to information security Safety at IPM ENGINEERING, s.r.o.
- Minimization of financial and other losses related to the disruption of information systems
- Minimization of risks to information system assets
- Protection of company assets from misuse
- Protection of company data, as well as customer data, from misuse or unauthorized access
-
- Protection of personal data and privacy of interested parties
- Protection of the company's know-how and reputation
For each area of information security, specific security objectives are set, along with basic principles and procedures to achieve these objectives within the company.