Commitment to Information Security and Data Protection
The protection of information assets at TRUEWORK Facility Services is an essential prerequisite for the effective and secure provision of comprehensive facility management services in both professional and public spaces, in both the public and private sectors. With absolute respect for privacy and in accordance with the current legal framework, the company implements a strict personal data protection policy, ensuring the confidentiality and integrity of all information.
To this end, the company has developed and implemented an Information Security Management System based on the requirements of the ISO 27001:2013 standard.
The company has established a specific policy for information security, through which it is committed to:
- Ensuring the security of information across all activities, processes, services, and products, confirmed and verified throughout the full scope of its operations.
- Ensuring the availability of the information required for the smooth operation of the company.
- Compliance with applicable legal provisions for its products and services.
- Providing training for employees on issues related to information security.
- Continuously improving the effectiveness of the Information Security Management System.
- Ensuring the confidentiality of information.
- Maintaining the integrity of information.
- Protecting information from unauthorized access.
Compliance with the Information Security Policy and, therefore, the protection of information security across all company activities, is mandatory for all employees.
The Information Security Policy is reviewed periodically, amended whenever necessary, and communicated to relevant stakeholders.
As part of the system's implementation, the company plans its realization through:
- Defining goals and systematically monitoring their implementation.
- Providing all necessary resources and means to ensure the uninterrupted, efficient, and effective operation of the company.
- Properly organizing, training, and developing our staff and encouraging continuous improvement.
- Monitoring critical parameters of our processes to ensure the security of information at all levels of operation.
- Fulfilling all relevant legal requirements and customer demands, ensuring that all activities/services/products are aligned with information security requirements.
