Skip to main content

Information Security Policy

Omniworks P.C. recognises that information security is essential to the reliable delivery of its services and to maintaining the trust of its customers, employees and business partners.

Through this Policy, Management establishes the fundamental principles for protecting information created, received, stored or transmitted in the course of the company’s operations, regardless of its form or the medium on which it is held.

Purpose and scope

The purpose of this Policy is to safeguard the confidentiality, integrity and availability of information. It applies to personnel, external associates, information systems, infrastructure, premises and services used or provided by Omniworks.

Key commitments

Omniworks is committed to:
  • complying with applicable legal, regulatory and contractual requirements, as well as the requirements of ISO/IEC 27001:2022 and ISO/IEC 27701:2019;
  • systematically identifying, assessing and treating information security risks;
  • implementing appropriate technical and organisational measures proportionate to the nature of the information and the associated risks;
  • controlling access to information in accordance with business needs and the principle of least privilege;
  • preventing, detecting, reporting and responding to information security incidents in a timely and organised manner;
  • maintaining appropriate business continuity, backup and recovery capabilities for disruptions or incidents;
  • regularly informing and training personnel and external associates on their information security responsibilities;
  • assessing suppliers and business partners that are granted access to company information or systems;
  • investigating nonconformities and implementing corrective actions where required;
  • continually improving the Information Security Management System and the effectiveness of the associated controls; and
  • setting and monitoring information security objectives that are measurable where practicable, taking into account applicable requirements, risk assessment results and business needs.

Roles and responsibilities

Management provides the necessary resources, assigns responsibilities and oversees the implementation of this Policy. All employees and external associates are required to follow the relevant procedures, protect the information they handle and promptly report any suspected incident or security weakness.

Review and communication

This Policy is communicated to personnel and relevant external associates and is made available to interested parties, as appropriate. The current public version is available on the company’s website.