{"id":1766,"date":"2026-05-20T13:09:59","date_gmt":"2026-05-20T13:09:59","guid":{"rendered":"https:\/\/atalisfunding.com\/security-policy\/"},"modified":"2026-05-20T13:20:40","modified_gmt":"2026-05-20T13:20:40","slug":"security-policy","status":"publish","type":"page","link":"https:\/\/atalisfunding.com\/en\/security-policy\/","title":{"rendered":"Security policy"},"content":{"rendered":"[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n

INTRODUCTION<\/span><\/b> <\/span><\/p>\n

Atalis Funding relies on ICT (Information and Communications Technology) systems to achieve its business objectives. These systems must be managed diligently, taking appropriate measures to protect them against accidental or deliberate damage that may affect the availability, integrity or confidentiality of the information processed or the services provided. <\/span> <\/span><\/p>\n

The objective of information security is to guarantee the quality of information and the continuous provision of services, acting preventively, monitoring daily activity and reacting promptly to incidents. <\/span> <\/span><\/p>\n

ICT systems must be protected against rapidly evolving threats that have the potential to impact the confidentiality, integrity, availability, intended use and value of information and services. To defend against these threats, a strategy that adapts to changing environmental conditions is required to ensure the continued delivery of services. This implies that departments must implement the minimum security measures required by the National Security Scheme, as well as continuously monitor service delivery levels, track and analyze reported vulnerabilities, and prepare an effective response to incidents to ensure the continuity of the services provided. <\/span> <\/span><\/p>\n

The different departments must ensure that ICT security is an integral part of every stage of the system’s life cycle, from its conception to its decommissioning, through development or procurement decisions and operational activities. Security requirements and funding needs should be identified and included in planning, request for bids, and bidding documents for ICT projects. <\/span> <\/span><\/p>\n

Departments must be prepared to prevent, detect, react and recover from incidents, in accordance with Article 7 of the ENS.<\/span> <\/span><\/p>\n

PREVENTION<\/span><\/b> <\/span><\/p>\n

Departments must avoid, or at least prevent as far as possible, information or services from being impaired by security incidents. To this end, departments must implement the minimum security measures determined by the ENS, as well as any additional controls identified through a threat and risk assessment. These controls, and the security roles and responsibilities of all personnel, must be clearly defined and documented. <\/span> <\/span><\/p>\n

To ensure compliance with the policy, departments must:<\/span> <\/span><\/p>\n