Quality and Information Security Policy

ARUMEL’s Management:

Promotes the maintenance and continuous improvement of an Integrated Quality Management System, based on the ISO 9001 standard, and Information Security, based on the National Security Framework and the ISO 27001 standard. This system promotes the maintenance and continuous improvement for the entire organisation, deploying all necessary resources to strengthen these foundations and achieve our objectives.
Maintains the commitment to meet the customer requirements—both technologically and humanly possible—while ensuring the confidentiality, integrity and availability of the information, always in strict compliance with current legal and regulatory requirements. Contractually applicable Codes, Standards and Specifications are considered fundamental elements of our business activity.
Commits to focusing our work within an environment that ensures continuous improvement, through the establishment and regular review of our quality and security objectives.
Fosters a culture of innovation aligned with its continuous improvement and focused on improving innovation in its products and services, processes and management of the organisation.
Commits to carrying out its activity by reducing risks in services, both internal and external, as well as both technical and human, thus resulting in greater availability of our resources.
Aims to provide the best technical, human and user service, measuring the commitments established with said user. Also seeks to integrate suppliers, providers, collaborators and partners, directing them towards the services they provide.
Promotes the continuous staff training and awareness in order to improve their contribution to the company, while enhancing their creativity, teamwork skills and innovative spirit.
Seeks to reduce or eliminate the risks or effects on ARUMEL’s activity that could result from possible information security breaches, taking into account the consequences of a loss of confidentiality, integrity or availability of existing assets.
As a general policy, Arumel defines its commitment to offering services with a guarantee of maintaining the confidentiality, integrity, availability, traceability and authenticity of the information, always in strict compliance with the current legal and regulatory requirements.
Promotes the maintenance and continuous improvement of a security management system, based on the National Security Framework and the ISO 27001 standard. It provides all necessary resources and ensures compliance with its security measures to strengthen these foundations and to achieve its objectives.
Encourages the reduction or elimination of risks or impacts on Arumel’s activity that could arise from possible security breaches, considering the consequences of a loss of confidentiality, integrity, availability, authenticity or traceability of existing assets.
Annually sets information security objectives and monitors them, verifying their compliance and establishing the necessary measures in case compliance is threatened.
Distributes the Quality and Information Security Policy to all the staff through the organisation’s website. This way, ARUMEL ensures that the Policy is understood by all the staff of the organisation and other interested parties.