RUBAU CERTIFIES ITS INFORMATION SECURITY MANAGEMENT SYSTEM ACCORDING TO THE NEW STANDARD UNE-EN ISO/IEC 27001

December, 2023

RUBAU has certified its Information Security Management System based on the UNE-EN ISO/IEC 27001:2017 standard with Aenor. This certification strengthens the security of the organization’s services, as well as the information and data included, necessary for the proper and adequate provision of the service. This system is used to protect the confidentiality, integrity, and availability of information; it establishes preventive measures for safeguarding system information and aims to maintain the confidentiality and integrity of data, regardless of its format.

The development of the Information Security Management System began with an analysis that allowed determining the level of information security risk in which our organization was located to identify necessary security controls and opportunities for risk treatment improvement.

The implementation process of the system according to the UNE-EN ISO 27001 standard has required:

• Definition and implementation of the information security policy.
• Determination of the internal and external context of the organization as well as the stakeholders.
• Design of risk analysis and the systematic continuous improvement of the system.
• Preparation and drafting of the documentation comprising the Information Security Management System.
• Training and awareness of the organization’s personnel.
• Internal and external audit processes.

With the implementation and certification of 27001, risks have been minimized, confidence has increased, reputation has been enhanced, and costs have been reduced, facilitating business continuity. The certification of the standard confirms the strong commitment that RUBAU Group maintains to the certification and integration of systems, particularly with information security. The goal is to improve the company’s processes and teams and to obtain the highest scores in public tenders.