ISO 27001:2022 – Information Security Policy
Neurosoft is a leading Information and Communication Technology (ICT) Integrator providing innovative solutions and services with the aim of increasing efficiency and security. Neurosoft portfolio offers state-of-the-art solutions and services in Infrastructure (network, cloud, security), Cyber and Field, while supporting the whole lifecycle of business operations from Design and Consulting to Support and Managed Services. Commitment to excellence is what Neurosoft believes in, with the development of innovative and agile solutions resulting from business and technology experience. As a result, Neurosoft implements an Information Security Management System, in accordance with the requirements of the International Standard EN ISO 27001:2022.
- Information Security is a top priority in order to:
- Ensuring the company’s full compliance with relevant legal and regulatory requirements,
- Protecting the interests of the company and those who deal with it and entrust it with the use and handling of their confidential data,
- Ensure the availability, integrity and confidentiality of information generated, received and managed as part of security projects.
- Maximize the reliability of the company’s information resources.
The implementation of the company’s ISMS aims at the following:
- Protect the retained file, computing resources and information moving across the company’s services from any threat, internal or external,
- Assessing and evaluating risks related to information security,
- Data archiving, preventing viruses and external attacks, controlling access to information systems, recording security incidents and attacks,
- Continuously updating personnel on information security issues and conducting training and seminars,
- Full commitment of the company’s management to the implementation and continuous improvement of the QMS, which complies with the requirements of ISO 27001:2022.
The Information Security Officer is responsible for controlling and monitoring the operation of the ISMS, as well as for informing all involved personnel about the Information Security Policy.
All personnel involved in the activities and processes described and related to information security have the responsibility to implement the information security management system policy and procedures in their area of work.
Management and all employees are committed to achieving the Company’s objectives and adhering to the principles in relation to Information Security.
To achieve the above, the Company implements an Information Security Management System in accordance with EN ISO 27001:2022.