Information Security Policy

KoolUncle S.L. aims to protect its clients and business objectives by providing its employees, collaborators, suppliers, and clients with a secure working environment through appropriate security measures and operational processes in the performance of the following activities:

Cybersecurity consulting services and secure software development and analysis.

Guiding Principles

The following principles shall be taken into account:

• Confidentiality — preserving the confidentiality of information and preventing its disclosure or access by unauthorized persons.
• Integrity — maintaining the integrity of information by ensuring its accuracy and preventing its deterioration.
• Availability — ensuring the availability of information, in all media, whenever it is required.

Information security must be flexible, effective, and support the company's business model. For this reason, Management undertakes to develop, implement, maintain, and continuously improve its Information Security Management System (ISMS), with the objective of continuously improving the way in which we provide our services and handle our clients' information.

Policy Guidelines

Accordingly, we establish the following guidelines:

• Establishing objectives related to Information Security.
• Complying with legal requirements and any other requirements to which we may subscribe.
• Carrying out training and awareness activities regarding Information Security processes for all personnel.
• Developing the analysis, management, and treatment of risks affecting information assets.
• Establishing all actions required to mitigate or eliminate the risks identified.
• Establishing employees' responsibility for reporting security incidents.
• Preserving the confidentiality, integrity, and availability of information assets in compliance with this policy.
• Ensuring compliance by all personnel with the policies and procedures of the Information Security Management System.

Management assigns responsibility and authority to the Information Security Officer for the maintenance of this policy, providing advice and guidance for its implementation and for the correction of deviations from its compliance, as well as for the management of the policies, procedures, and activities of the ISMS.

This Information Security Policy shall always remain aligned with the company's general policies.

General Management