Description

Wolkvox has a formally established Information Security Policy, reflecting its commitment to data protection and compliance with the highest security standards. This policy is reviewed and approved annually by senior management, ensuring alignment with industry best practices and regulatory requirements. It is also actively promoted among all employees through awareness and training activities, ensuring that every employee not only knows the policy but also understands, accepts, and complies with it as part of their job responsibilities. The policy is publicly available and integrated into the internal work regulations, reinforcing its mandatory nature.

Features

Content and Scope of the Policy

• Regulatory Framework: The policy establishes principles and guidelines for the secure management of information, aligned with standards such as ISO/IEC 27001 and applicable regulations (e.g., GDPR, PCI-DSS).
• Clear Responsibilities: Defines the roles and obligations of employees, from senior management to operational staff, regarding information security.
• Comprehensive Protection: Addresses aspects such as confidentiality, integrity, availability of information, access control, incident management, and business continuity.

Availability and Acceptance

• Public Access: The policy is available for consultation on the Wolkvox website: Security and Privacy Policies.
• Formal Acceptance: All employees must formally accept the policy, either through physical or digital signature, as part of their onboarding and annual reviews.
• Integration into Internal Regulations: The policy is part of the internal work regulations, reinforcing its mandatory nature and daily application.

Awareness and Compliance

• Regular Training: Awareness activities (workshops, communications, drills) are conducted to ensure employees understand the importance of the policy and know how to apply it.
• Compliance Evaluation: Adherence to the policy is monitored through internal audits, incident reviews, and team feedback.
• Continuous Updates: The policy is reviewed annually (or in case of significant changes) to incorporate new threats, technologies, or legal requirements, ensuring its relevance.