Information Security Policy
ISO/IEC 27001:2022

At Qatium, a company dedicated to developing, maintaining, and distributing advanced software solutions for the water industry, we recognize the critical importance of information security, quality, and environmental responsibility in the daily operation of our business and in the proper management of our information assets.

To ensure robust management in these areas and protect against potential threats, Qatium has implemented an integrated management system in accordance with the ISO/IEC 27001:2022 standard for information security. This system is designed to safeguard the confidentiality, integrity, and availability of our information, minimize risks, and ensure the continuity of our services, while also addressing our commitments to quality and environmental sustainability.

Our commitment is guided by the following principles:
— Compliance with Legal and Regulatory Requirements: We adhere to all applicable laws, regulations, and contractual obligations related to information security, quality, and environmental management.
— Protection of Data Privacy: We are dedicated to ensuring the privacy of the data we manage, including that of our clients, employees, suppliers, and partners.
— Confidentiality, Integrity, and Availability: We guarantee that our information assets are protected against unauthorized access, loss, or damage, maintaining their confidentiality, integrity, and availability.
— Risk Management: We continuously identify and assess risks relevant to our organization, implementing measures to mitigate these risks effectively.
— Business Continuity: We ensure our capability to respond to emergency situations, restoring critical services in the shortest possible time.
— Environmental Responsibility: We identify and minimize the environmental impact of our activities, focusing on reducing resource consumption and preventing pollution throughout the lifecycle of our services.
— Information Asset Protection: We protect our information assets according to their value or importance, ensuring they are secure from internal and external threats.
— Security Awareness and Training: We promote a culture of information security awareness through regular training and communication, ensuring all our clients, employees, suppliers, and partners understand their role in maintaining security.
— Quality Assurance: We strive to achieve the highest level of customer satisfaction by delivering services that meet or exceed client expectations and industry standards.
— Continuous Improvement: We establish a framework for setting objectives and goals in information security, quality, and environmental management, with a focus on the continuous improvement of our systems, processes, and activities.

An Information Security Committee has been established to oversee the approval, dissemination, and enforcement of this policy, as well as the ongoing supervision, implementation, development, and maintenance of the integrated management system.
This policy is reviewed periodically to ensure its relevance and effectiveness. All Qatium clients, employees, suppliers, and partners are required to adhere strictly to this policy, and it is publicly accessible to ensure transparency.

Date: 04/09/2024