UPCOM operates and maintains a certified Information Security Management System in accordance with ISO/IEC 27001:2022. The system provides structured protection for information that supports the company’s services and operations.
Purpose and application
This policy covers the information and information systems managed by UPCOM, regardless of their format or processing location. It applies to employees, external associates and, where relevant, suppliers that have access to the company’s information or infrastructure.
UPCOM commitments
- Protects the confidentiality, integrity and availability of information.
- Regularly assesses information security risks and applies proportionate organisational and technical measures.
- Complies with applicable legal, regulatory and contractual requirements, including personal data protection requirements.
- Establishes information security objectives, monitors their achievement and provides the necessary resources.
- Controls access to information according to role, business need and the principle of least privilege.
- Provides employees and associates with appropriate information and training on their obligations and relevant secure practices.
- Promotes prompt reporting of information security events and weaknesses and ensures their timely assessment and treatment.
- Maintains appropriate arrangements for business continuity, backups and the recovery of critical services.
- Assesses information security requirements in relationships with suppliers and other external parties.
- Monitors the effectiveness of the system and continually improves it through measurement, review and corrective action.
Responsibility and compliance
Everyone working on behalf of UPCOM must comply with this policy and the related procedures, protect the information entrusted to them and report any actual or suspected information security incident without undue delay through the company’s approved channels.
Management commitment and review
UPCOM Management supports the implementation of this policy, assigns clear responsibilities and provides the necessary resources. The policy is reviewed at planned intervals and whenever material changes occur in services, risks or applicable requirements. This public version is made available to interested parties through the UPCOM website.
Approval / Date
K. Flokos
CEO