Cybersecurity policies

Objective and scope

The Management of Alpha Quartz recognizes that information security is a priority objective that must be driven and supported by all members of the organization. To this end, Alpha Quartz is committed to developing, implementing, maintaining, and continually improving an Information Security Management System.

Information Security is characterized as the preservation of:

• Confidentiality, ensuring that only those authorized can access the information.

• Integrity, ensuring that information and its processing methods are accurate and complete.

• Availability, ensuring that authorized users have access to the information when required.

The Management of Alpha Quartz has defined and allocated all necessary resources to correctly and timely manage Information Security within the organization. Policies, procedures, and controls have been implemented to help achieve the established Information Security objectives based on the ISO/IEC 27001:2022 specification.

Responsibilities

• The Security Manager is responsible for the drafting, updating, publishing, and ensuring compliance with this policy.

• Management is responsible for the approval of this policy.

• This Information Security Policy must be known and complied with by all Alpha Quartz personnel, regardless of their position or contractual status.

Description

It is Alpha Quartz’s policy to:

• Define the Information Security Policy considering relevant corporate requirements. Define the company's annual Information Security Management System objectives (Strategic Objectives) and Operational Objectives.

• Review the Information Security Management System annually in accordance with the Management Review Procedure.

• Formalize a Risk Analysis methodology to identify and manage information security risks.

• Define the acceptable Risk level for the Information Security Management System. Implement all necessary controls to mitigate risks and achieve a residual risk lower than the maximum acceptable level.

• Establish an Asset Identification and Valuation Procedure, as well as an asset inventory designating their owners. All Alpha Quartz employees must comply with the Acceptable Use Policy for assets, as well as the information classification, labeling, and handling procedures.

• Comply with service, legal, or regulatory requirements and contractual security obligations.

• Establish an annual training plan to maintain the competencies of all employees. Establish that all personnel are responsible for reporting confirmed or suspected security breaches in accordance with the corresponding procedures.

• Establish the necessary means to guarantee the continuity of Alpha Quartz’s operations.

• Communicate internally and to the general public the importance of effective information security management and compliance with the Information Security Management System requirements.

• Promote continuous improvement to meet the objectives established in relation to information security management.

Advanced Cybersecurity Implementation – Alpha Quartz

At Alpha Quartz, we implement cybersecurity solutions with the highest international standards, integrating state-of-the-art strategies to protect our clients' digital assets. Our approach combines artificial intelligence, advanced encryption protocols, and continuous monitoring to anticipate, detect, and neutralize threats in real-time.

We apply ISO/IEC 27001 regulations and NIST cybersecurity frameworks, ensuring comprehensive management of technological risk. Every solution is customized, scalable, and designed to integrate effectively with existing systems, guaranteeing both operational continuity and information integrity.

Trust, professionalism, and technical excellence are pillars in every implementation. With Alpha Quartz, your organization moves securely toward the digital future.

​

References

ISO/IEC 27001:2022 – Chapter 5.2 Politics.July 1, 2025

​