Last updated: 24/04/2025
INESPAY’s Security Policy reflects the concepts, principles, responsibilities, and objectives regarding security, whose results allow the company the necessary freedom of action.
The objective of INESPAY’s Integral Security is to protect all people – users, professionals, and workers – the confidentiality of their communications, and the integrity of their information. It also safeguards the other assets that make up the company’s assets, such as facilities or content of all kinds.
Integral Security encompasses the traditional concepts of physical security and logical security (technological) in order to maintain business continuity in the face of any adverse circumstance.
An increase in the “security culture” among personnel will provide clear benefits by increasing the security of systems and procedures, and will minimize the risk of potential malicious actions. It is essential that all information regarding security matters flows through appropriate channels both horizontally and vertically in the organizational unit.
1. Principles
- Integration. Global Security is an integrated process aligned with the activity, in which the entire company participates.
- Profitability. Security is guided by business criteria, taking into account the relationship between expense and investment. Its criteria are set centrally, taking advantage of any existing synergies. This management allows for better performance of the effort applied to security.
- Continuity. Security must be present throughout its entire work cycle: protection, prevention, detection, response, and recovery.
- Adequacy. The means employed must adapt to the activity environment. Among other factors, competition with other companies, social, political, and economic disorders, and amateur or professional hacking stand out for their impact on activity and the organization’s security levels.
2. Responsibilities
Ultimate responsibility for security corresponds to the management team, which is directly responsible for managing its development and implementation.
The management team will analyze the risks and vulnerabilities in terms of security that may affect the proper functioning of the activity and will propose the appropriate standards, means, and measures to minimize them.
All personnel in the organization must assume responsibility for maintaining the security of the assets in their charge, observing the security standards implemented by the management team.
3. Objectives
- Achieve and maintain the level of security required to adequately guarantee business continuity, even in adverse situations.
- Increase integration and mutual support of the physical and logical aspects of security.
- Collaborate in the management of other security disciplines, including labor and environmental aspects, attending to criteria that enhance Corporate Social Responsibility.
- Establish the corporate security structure defined by the organization’s decision-making bodies and create appropriate communication channels among all those involved.
- Comply with official regulations on security matters and other requirements. Establish and implement Security Training and Awareness Plans to improve personnel training.
- Express commitment to continuous improvement.
- Integrate the different company departments into a security management system that, under common criteria, leverages synergies and achieves consistency in resources and actions.
- All INESPAY personnel will know and apply the regulations that develop this Security Policy.