General Security Policy
The general information security and privacy policy establishes the guidelines and procedures applicable to employees, contractors, and any other authorized individuals who may lawfully process MAS Global’s information. Additionally, it provides the foundation for implementing the information security framework, ensuring secure and responsible handling, thus protecting the organization, its clients, and its partners.
The primary objective is to safeguard information from internal and external threats while balancing risk levels and ensuring operational continuity. Additionally, it aims to mitigate the impacts of security breaches and protect information from malicious actors. Furthermore, it seeks to generate business opportunities, meet client needs, and ensure compliance with legal, contractual, regulatory and applicable requirements. Effective information management will also help maintain relationships with current and future customers.
The information security framework addresses client needs, legal, contractual, regulatory and applicable requirements, in alignment with security standards and best practices. This framework encompasses key concepts such as confidentiality, integrity, availability, non-repudiation, effectiveness, efficiency, and reliability. These principles ensure the proper handling, protection, and quality of personal data and information overall.
Safeguarding information requires holistic risk management procedures that identify, classify, and define the responsible owners of information assets, considering their sensitivity and criticality (public, private, or confidential) according to the information classification process. Additionally, the appropriate treatment option (accept, mitigate, avoid, or transfer), the level of criticality, and the necessary controls based on the level of exposure must be decided, always prioritizing and maintaining an acceptable level of risk as defined by the company.
MAS Global allocates the necessary resources to ensure effective information security governance, aligning with business needs, strategy, vision, mission, organizational policies, labor relations policies, and legal, contractual, regulatory and applicable requirements, as well as internal needs and those of clients, partners, and other stakeholders. Additionally, it provides education, training, and awareness programs to foster a culture of security.
Users of MAS Global’s ICT, such as, but not limited to, employees, contractors, participants in special projects, and users with connection to the guest network, or others whose agreements involve the use of the company’s ICT resources, are responsible for the proper and secure use of these resources and for complying with the control measures established on the equipment or information assets they have access to. Additionally, they must report any improvement opportunities, security events, or incidents through the channel defined by the company and implement the necessary preventive or corrective actions to ensure continuous improvement in information security management.
MAS Global’s executive leadership has approved this policy, reaffirming its commitment to designing and implementing effective measures to ensure information security. Additionally, periodic reviews will be conducted to evaluate the achievement of objectives and the progress of activities aimed at the continuous improvement of the information security management system (ISMS). Furthermore, responsibility is delegated to the IT and Innovation Manager to ensure compliance with this policy and the ISMS guidelines, as well as their dissemination, review, and updating, in accordance with the international standard ISO/IEC 27001 and other relevant standards derived from the requirements of stakeholders involved in the ISMS.
MAS Global strives to create and be a positive impact agent on its clients, its people, and its communities through development and maintenance of a culture of skilled technology professionals who deliver invaluable digital transformations with a commitment based on trust and enriching collaboration.