Information Security Policy

Information Security is a top priority for Qorect in order to:

• Ensure the company’s full compliance with relevant applicable legal and regulatory requirements.
• Protect the interests of the company and those who do business with it and trust it with the use and handling of their confidential data
• To ensure the availability, integrity, and confidentiality of information generated, received, and handled in the context of security projects.
• To maximize the reliability of the company’s information resources. 

To achieve the above, the company implements an Information Security Management System (ISMS) in accordance with the ELOT EN ISO/IEC 27001:2023 (ISO/IEC 27001:2022) standard.

The implementation of the Information Security Management System aims to achieve the following:

• Protection of stored data, computing resources, and information in transit within the company’s services from any threat, whether internal or external, intentional or accidental.
• Systematic assessment and evaluation of risks related to information security, with a view to their proper and timely management.
• Data archiving, prevention of viruses and external intrusions, control of system access, logging of all security incidents, and management of unexpected developments.
• Keeping management and staff continuously informed on information security issues and conducting training seminars for staff.

The Information Security Manager is responsible for controlling and monitoring the operation of the Information Security Management System, as well as for informing all relevant personnel about the Information Security Policy. All staff members are responsible for implementing the Information Security Management System’s Policies and Procedures within their respective areas of work. The company’s management is fully committed to the faithful implementation and continuous improvement of the Information Security Management System.