The protection of information and the systems used to process it is of strategic importance to ACTA AE in order to achieve its short- and long-term goals and, at the same time, to safeguard the privacy of the citizens it serves.

Recognizing the critical importance of information and information systems to the execution of its operational functions, ACTA AE implements an Information Security Policy aimed at:

To this end:

ACTA AE conducts assessments of risks related to Information Security at regular intervals and takes the necessary measures to address them. It implements a framework for evaluating the effectiveness of information security procedures, through which performance indicators are established, describes the methodology for measuring them, and generates periodic reports that are reviewed by management with the aim of continuously improving the system.

The Information Security Officer is responsible for reviewing and monitoring policies and procedures related to Information Security and for taking the necessary initiatives to eliminateall factors that could jeopardize the availability, integrity, and confidentiality of ACTA AE’s information.

All ACTA AE employees and associates with access to ACTA AE information and information systems are responsible for complying with the rules of the applicable Information Security Policy.

ACTA AE is committed to continuously monitoring and complying with the regulatory and legislative framework and to the ongoing implementation and improvement of the effectiveness of the Information Security Management System.