Within the scope of Information Security, Conceito’s goal is to implement the adequate measures (including, among others, systems, infrastructure, resources, and controls) that guarantee the integrity, availability and confidentiality of the information assets, in order to avoid their potential alteration, destruction, theft, copying, counterfeiting and other existing threats, whether accidental or not.

Thus, Conceito undertakes to:

 

• Provide a service of excellence to its clients thus contributing to the creation of value in their business activities and guaranteeing the protection of their information assets.

 

• Continuously improve its information security strategy by updating policies frequently, verifying the effectiveness of the implemented measures, training and communicating documented information and following up on situations reported as having an impact on the organisation.

 

• Ensure that its activities are in accordance with all relevant legislative, regulatory, and normative provisions;

 

• Observe the ISO/IEC 27001 standard, complying with the principles of Confidentiality, Integrity and Availability and continuously improving the effectiveness of the Management System.

This Information Security Policy applies to:

• All sites, areas, internal collaborators that have access to Conceito’s information systems;

• Relevant suppliers that may access Conceito’s information systems;

• All the information systems, regardless of the technology that supports them;

• All types of information created or used regardless of its format or storage medium.