Security Policy

GLOBAL PRODUCTION INVESTMENTS, SL as an event management company, oriented towards providing services to medium and large companies with a multi-site structure, and aware that the security of client-related information is a critical resource, has established an Information Security Management System in accordance with the requirements of the ISO/IEC 27001:2022 standard, in order to ensure the continuity of information systems, minimise the risk of damage and ensure compliance with the established objectives.

The objective of the Information Security Policy is to establish the necessary framework for protecting information resources against threats, whether internal or external, deliberate or accidental, with the aim of ensuring compliance with the confidentiality, integrity and availability of information.

The scope of the Information Security Management System is defined by "Information security management systems that support the organisation and production of corporate events in accordance with the current statement of applicability".

The effectiveness and application of the Information Security Management System is the direct responsibility of the Information Security Committee, which is responsible for the approval, dissemination and compliance of this Security Policy. On its behalf and representation, an Information Security Management System Manager has been appointed, who holds sufficient authority to play an active role in the Information Security Management System, overseeing its implementation, development and maintenance.

The Information Security Committee will proceed to develop and approve the risk analysis methodology used in the Information Security Management System.

At GLOBAL PRODUCTION INVESTMENTS, SL, all necessary measures will be implemented to comply with applicable regulations regarding security in general and IT security, relating to IT policy, the security of buildings and facilities, and the conduct of employees and third parties associated with GLOBAL PRODUCTION INVESTMENTS, SL in the use of computer systems. The measures required to ensure information security through the application of standards, procedures and controls must make it possible to ensure the confidentiality, integrity and availability of information, which are essential in order to:

• Comply with current legislation on information systems.
• Ensure the confidentiality of data managed by GLOBAL PRODUCTION INVESTMENTS, SL.
• Ensure the availability of information systems, both in the services offered to clients and in internal management.
• Ensure the capacity to respond to emergency situations, restoring the operation of critical services in the shortest possible time.
• Prevent unauthorised alterations to information.
• Promote awareness and training in information security.
• Establish objectives and targets focused on evaluating performance in information security, as well as continuous improvement in our activities, as governed by the Management System that implements this policy.