GRUPO ATLANTIC, whose Information Security Management System covers:

“Insurance and reinsurance brokerage and the provision of intermediary services between clients and insurance companies”

GRUPO ATLANTIC has decided to implement an ISMS based on the ISO 27001 standard with the aim of preserving the confidentiality, integrity and availability of information and protecting it from a wide range of threats. This ISMS is designed to ensure continuity and continuous improvement.

The Management of GRUPO ATLANTIC recognises that information is a highly valuable asset for the Organisation and therefore requires adequate protection.

The Management of GRUPO ATLANTIC approves and establishes the following as the objectives of the ISMS:

  • The protection of personal data and individuals’ privacy
  • The management of information security risks through their identification, analysis and treatment
  • The protection of intellectual property rights
  • The allocation of roles and responsibilities regarding information security
  • The training and development of staff in information security
  • The recording and management of security incidents
  • The continuous improvement of the ISMS

The Management of GRUPO ATLANTIC, through the development and implementation of this ISMS, undertakes the following commitments:

  • To comply with applicable legal, regulatory and contractual requirements.
  • To establish and comply with contractual and security requirements with stakeholders.
  • To define security training requirements and provide the necessary training through training plans.
  • To protect information systems against threats by implementing appropriate security measures.
  • To manage business continuity by establishing and maintaining business continuity plans.
  • Establish the consequences of breaches of the security policy in accordance with applicable internal and contractual regulations.
  • Provide the necessary resources for the proper functioning of the ISMS

This Policy provides the framework for the continuous improvement of the ISMS and for establishing and reviewing measurable ISMS objectives. It is communicated to the entire Organisation through established internal channels and is made available to interested parties; it is reviewed at least once a year, or whenever significant changes occur in the Organisation’s context or in the ISMS, and is made available to the public when required.

Management

Thursday, 23 April 2026