Skip to main content

Information Security Policy

The protection of information and the systems that process it is of strategic importance for the Company in order to achieve both its short-term and long-term goals, while also ensuring the confidentiality of customer data associated with its services.

Recognizing the critical role of information and information systems in carrying out its business operations, PEARL S.A. implements an Information Security Policy with the aim of:

  • ensuring the confidentiality, integrity, and availability of the information it manages

  • safeguarding the proper functioning of its information systems

  • promptly addressing incidents that could jeopardize the Company’s business operations

  • complying with legal and regulatory requirements

  • continuously improving the level of Information Security

For this purpose:

  • The organizational structures necessary for monitoring Information Security issues are defined.

  • The technical control measures and access restrictions to information and information systems are established.

  • The method for classifying information based on its importance and value is determined.

  • The necessary actions for protecting information during its processing, storage, and transmission are described.

  • The methods for informing and training the company’s employees and partners on Information Security matters are specified.

  • The procedures for responding to Information Security incidents are outlined.

  • The ways in which the secure continuity of the Company’s business operations is ensured in cases of information system malfunctions or disasters are described.

The Company conducts regular assessments of risks related to Information Security and takes the necessary measures to address them. It implements a framework for evaluating the effectiveness of Information Security processes, within which performance indicators are defined, the methodology for measuring them is described, and periodic reports are generated and reviewed by Management to ensure the continuous improvement of the system.

The Information Security Officer is responsible for overseeing and monitoring the policies and procedures related to Information Security and for taking the necessary initiatives to eliminate any factors that could jeopardize the availability, integrity, and confidentiality of the Company’s information.

All Company employees and partners who have access to the Company’s information and information systems are responsible for adhering to the rules of the implemented Information Security Policy.

PEARL is committed to the continuous monitoring and compliance with the regulatory and legal framework, as well as to the ongoing implementation and improvement of the effectiveness of its Information Security Management System.

Contact

Business Registry No (GEMI): 134836807000