Information security policy

Last updated: 15 June 2026.

The security and safeguarding of information assets is an essential condition for achieving the business objectives of ATView S.r.l. Information security requirements are consistent with the company’s objectives, and the Information Security Management System (ISMS) is the tool that allows information to be shared, operations to be carried out correctly and information-related risks to be reduced to acceptable levels.

Company activities must therefore always be carried out ensuring adequate levels of confidentiality, integrity and availability of information, through the adoption of a formal “Information Security Management System” (ISMS) in line with the requirements expected by ATView S.r.l.’s stakeholders and in compliance with current regulations. Here:

• Confidentiality means the property that information is not made available or disclosed to unauthorised individuals, entities or processes;
• Integrity means the property of safeguarding the accuracy and completeness of information and of the assets connected to it;
• Availability means the property of being accessible and usable upon demand by an authorised entity.

Scope

The Information Security Management System applies to the:

“Provision of Business Process Outsourcing (BPO) services, system administration activities, customisation of CRM and ERP software and development of Modern Workplace solutions”

Objectives

The general objectives of the ISMS, pursued with the commitment of management, are:

• to demonstrate to stakeholders the company’s ability to deliver secure IT services consistently, maximising security objectives;
• to minimise the risk of loss and/or unavailability of the data managed, by planning and managing activities to ensure service continuity;
• to carry out a continuous and adequate risk analysis that constantly examines the vulnerabilities and threats associated with the activities to which the system applies;
• to comply with current laws and regulations, contractual requirements and existing procedures;
• to promote cooperation, understanding and awareness of the ISMS among strategic suppliers;
• to comply with the principles and controls set out in ISO/IEC 27001:2022 or in other standards and regulations governing the company’s activities, in particular those concerning the processing and security of personal data (GDPR and national legislation).

Responsibilities

All staff, within their respective responsibilities, are involved in reporting to the Information Security Management System Manager (RSGSI) any adverse events or incidents encountered and any weakness identified in the ISMS.

The whole organisation, starting from top management, is committed to supporting the implementation, operation and periodic review of the ISMS for continual improvement. Top management undertakes to pursue the objectives of this policy with adequate means and resources.