Integrated Policy

BeDisruptive is committed to excellence in the mission of driving the secure digital transition of its clients by providing the most advanced cybersecurity solutions through customised projects that also cover the main levers of the digital transition of companies.

The purpose of this policy is to set out the guidelines and commitment of Senior Management to provide products and services of the highest quality, guaranteeing the confidentiality, integrity, availability, traceability and authenticity of the information, as well as the protection of the environment. All this, according to the purpose, context and strategy of the Organisation, based on continuous improvement. 

For this purpose, the Organisation plans, documents, implements and maintains an Integrated Management System (IMS), in accordance with the requirements of the standards:

• UNE-EN-ISO 9001 Quality Management System
• UNE-EN-ISO 14001 Environmental Management System
• UNE-EN-ISO 27001 Information Security Management System
• UNE-ISO/IEC 20000-1 Information Technologies. Service Management
• It also takes the Spanish National Security Scheme (ENS) as a reference.
  
  

To this end, the Organisation undertakes to:

• Meet the needs and expectations of stakeholders involved within the scope of the IMS, protecting the organisation’s information.
• Demonstrate leadership by management, providing financial and human resources to the IMS and ensuring that the security policy and objectives established are compatible with the organisation’s strategy.
• Commit to the continuous improvement of the Integrated Management System to improve performance, and the implementation of effective and efficient security measures based on the current and expected threat environment.
• Establish annual objectives, related to specific areas aligned with the reference standards of the Integrated Management System.
• Comply with business, legal or regulatory requirements and contractual obligations of the Integrated System.
• Implement sustainable practices to minimise the impact on the environment and promote environmental protection and sustainability in collaboration with all stakeholders.
• Commitment of Senior Management through continuous awareness-raising and sensitisation of all the Organisation’s personnel in terms of information security, quality and environmental protection.
• Define processes for handling deviations and/or exceptions to this policy.
• To apply this Policy to all services provided by the Organisation to clients, and also to internal services, with the particularities that may be applicable.  
• Customer services are defined in the Service Catalogue.

This Policy has the full commitment of Senior Management and is reviewed periodically for its continuous adaptation to the current Regulatory Framework and compliance with the laws and regulations applicable to BeDisruptive.

CEO

SCOPES:

• The scope of ISO 27001 (ISMS) for BeDisruptive is as follows:
  The information systems supporting the following services of the SOC: Managed Detection and Response”. Considering the locations and operating environments of Madrid and Italy in accordance with the applicability document/Service Catalogue.

• The scope of ISO 9001 (QMS) for BeDisruptive is as follows:
  The activities of Consulting Management, Design and Management of Training Actions, SOC Operation, these being all the products and services provided by BeDisruptive.
  
  The activities associated with the scope of the QMS are carried out from the following locations:

• • MADRID
    Paseo de la Castellana, 259 C, Planta 33. 28046 Madrid, España

• • ROMA
    Via dei Giuochi Istmici, 40. 00135 Roma, RM, Italia