{"id":25330,"date":"2024-11-21T12:15:47","date_gmt":"2024-11-21T11:15:47","guid":{"rendered":"https:\/\/www.gloval.es\/?page_id=25330"},"modified":"2026-07-07T10:53:56","modified_gmt":"2026-07-07T08:53:56","slug":"information-security-policy","status":"publish","type":"page","link":"https:\/\/www.gloval.es\/en\/information-security-policy\/","title":{"rendered":"Information Security Policy"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row unlock_row_content=&#8221;yes&#8221; row_height_percent=&#8221;0&#8243; override_padding=&#8221;yes&#8221; h_padding=&#8221;0&#8243; top_padding=&#8221;0&#8243; bottom_padding=&#8221;0&#8243; back_color=&#8221;color-xsdn&#8221; back_image=&#8221;31663&#8243; back_repeat=&#8221;no-repeat&#8221; back_position=&#8221;center bottom&#8221; overlay_alpha=&#8221;0&#8243; equal_height=&#8221;yes&#8221; gutter_size=&#8221;3&#8243; column_width_percent=&#8221;100&#8243; shift_y=&#8221;0&#8243; z_index=&#8221;0&#8243; row_height_pixel=&#8221;200&#8243; el_class=&#8221;single-service-header white-subheading snd-reports-bg&#8221; css=&#8221;.vc_custom_1705671514263{margin-top: -90px !important;padding-top: 100px !important;}&#8221; uncode_shortcode_id=&#8221;105555&#8243; back_color_type=&#8221;uncode-palette&#8221;][vc_column column_width_use_pixel=&#8221;yes&#8221; position_horizontal=&#8221;right&#8221; position_vertical=&#8221;middle&#8221; align_horizontal=&#8221;align_center&#8221; gutter_size=&#8221;0&#8243; override_padding=&#8221;yes&#8221; column_padding=&#8221;0&#8243; overlay_alpha=&#8221;50&#8243; shift_x=&#8221;0&#8243; shift_y=&#8221;0&#8243; shift_y_down=&#8221;0&#8243; z_index=&#8221;0&#8243; medium_width=&#8221;0&#8243; mobile_width=&#8221;0&#8243; width=&#8221;1\/2&#8243; column_width_pixel=&#8221;600&#8243; uncode_shortcode_id=&#8221;109194&#8243; el_class=&#8221;heading-wrapper-first only-bg&#8221;][uncode_breadcrumbs text_lead=&#8221;small&#8221; el_class=&#8221;breadcrumbs-wrapper&#8221;][\/vc_column][vc_column column_width_percent=&#8221;100&#8243; position_horizontal=&#8221;right&#8221; align_horizontal=&#8221;align_right&#8221; gutter_size=&#8221;0&#8243; overlay_alpha=&#8221;50&#8243; shift_x=&#8221;0&#8243; shift_y=&#8221;0&#8243; shift_y_down=&#8221;0&#8243; z_index=&#8221;0&#8243; medium_width=&#8221;0&#8243; mobile_visibility=&#8221;yes&#8221; mobile_width=&#8221;0&#8243; width=&#8221;1\/2&#8243; el_class=&#8221;city-bg&#8221; css=&#8221;.vc_custom_1670247145573{padding-right: 50px !important;}&#8221;][\/vc_column][\/vc_row][vc_row row_height_percent=&#8221;0&#8243; override_padding=&#8221;yes&#8221; h_padding=&#8221;0&#8243; top_padding=&#8221;0&#8243; bottom_padding=&#8221;0&#8243; overlay_alpha=&#8221;50&#8243; gutter_size=&#8221;3&#8243; column_width_percent=&#8221;100&#8243; shift_y=&#8221;0&#8243; z_index=&#8221;0&#8243; css=&#8221;.vc_custom_1705595074085{border-right-width: 0px !important;border-left-width: 0px !important;padding-top: 20px !important;padding-bottom: 10px !important;}&#8221; uncode_shortcode_id=&#8221;465592&#8243; el_class=&#8221;snd-page-heading&#8221;][vc_column column_width_percent=&#8221;100&#8243; position_horizontal=&#8221;left&#8221; gutter_size=&#8221;3&#8243; overlay_alpha=&#8221;50&#8243; shift_x=&#8221;0&#8243; shift_y=&#8221;0&#8243; shift_y_down=&#8221;0&#8243; z_index=&#8221;0&#8243; medium_width=&#8221;0&#8243; mobile_width=&#8221;0&#8243; width=&#8221;1\/1&#8243; css=&#8221;.vc_custom_1705580763936{border-right-width: 0px !important;border-left-width: 0px !important;}&#8221; uncode_shortcode_id=&#8221;306809&#8243;][vc_custom_heading auto_text=&#8221;yes&#8221; text_color=&#8221;color-xsdn&#8221; heading_semantic=&#8221;h1&#8243; text_size=&#8221;h1&#8243; el_class=&#8221;page-heading blue-heading no-top&#8221; uncode_shortcode_id=&#8221;793157&#8243; text_color_type=&#8221;uncode-palette&#8221;][\/vc_custom_heading][\/vc_column][\/vc_row][vc_row row_height_percent=&#8221;0&#8243; override_padding=&#8221;yes&#8221; h_padding=&#8221;2&#8243; top_padding=&#8221;0&#8243; bottom_padding=&#8221;2&#8243; back_color=&#8221;color-xsdn&#8221; overlay_alpha=&#8221;50&#8243; gutter_size=&#8221;3&#8243; column_width_percent=&#8221;100&#8243; shift_y=&#8221;0&#8243; z_index=&#8221;0&#8243; content_parallax=&#8221;0&#8243; uncode_shortcode_id=&#8221;187023&#8243; back_color_type=&#8221;uncode-palette&#8221;][vc_column column_width_percent=&#8221;100&#8243; gutter_size=&#8221;3&#8243; overlay_alpha=&#8221;50&#8243; shift_x=&#8221;0&#8243; shift_y=&#8221;0&#8243; shift_y_down=&#8221;0&#8243; z_index=&#8221;0&#8243; medium_width=&#8221;0&#8243; mobile_width=&#8221;0&#8243; width=&#8221;1\/1&#8243; uncode_shortcode_id=&#8221;557541&#8243; el_class=&#8221;legal-section-block&#8221;][vc_custom_heading text_color=&#8221;color-166142&#8243; uncode_shortcode_id=&#8221;150033&#8243; text_color_type=&#8221;uncode-palette&#8221;]<span class=\"markedContent\"><span dir=\"ltr\" role=\"presentation\">Information Security Management System Manual<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span class=\"markedContent\"><span dir=\"ltr\" role=\"presentation\">Annex B.<\/span> <span dir=\"ltr\" role=\"presentation\">Information Security Policy \u2013 15 January 2026<\/span><\/span>[\/vc_custom_heading][vc_column_text uncode_shortcode_id=&#8221;166219&#8243;]The BIVALTASA GLOVAL ADVISORY S.L. group (hereinafter, \u201cGloval\u201d), aware of the importance of information security for our clients&#8217; trust in the services we offer and of the threats that currently exist, has implemented an Information Security Management System in accordance with the ISO\/IEC 27001:2022 standard (hereinafter, \u201cISMS\u201d) in the business processes commercially managed by all the companies that are part of the Gloval group.<\/p>\n<p>&nbsp;<\/p>\n<p>The objective of this Management System is to establish an operational and control framework, based on internationally recognized best business practices, to protect all information under Gloval&#8217;s control, as well as the various assets necessary for its processing.<\/p>\n<p>&nbsp;<\/p>\n<p>This ISMS Policy, as well as all implementing regulations created within its scope, is mandatory for all personnel. Failure to comply with the provisions of these documents will have various consequences for all parties involved, including the implementation of disciplinary proceedings for internal staff or the termination of agreements between Gloval and its collaborating third parties. Gloval has established specific procedures to ensure that all personnel are aware of, understand, and comply with the ISMS Policy and all its implementing regulations.<\/p>\n<p>&nbsp;<\/p>\n<p>Additionally, mechanisms have been established and are available to all stakeholders to communicate any concerns, notifications, or complaints regarding the various compliance obligations that affect Gloval or to which it has committed. The use of these means will not, under any circumstances, result in retaliation or any other detriment to those who submit notifications in good faith. In the event of risks or situations related to the commission of crimes or bribery, all Gloval personnel, as well as any third parties with whom it has a relationship, will be obligated to report these situations as soon as possible.<\/p>\n<p>&nbsp;<\/p>\n<p>As a demonstration of its commitment to security, Gloval&#8217;s Management publicly makes the following commitments:<\/p>\n<p>&nbsp;<\/p>\n<p>\u2022 To consider security as a comprehensive, risk-based process, continuously evaluating and managing the internal and external factors that affect the organization.<br \/>\n\u2022 To actively support the Management System, as well as the personnel in charge of it, providing them with the necessary resources for its performance.<br \/>\n\u2022 To establish a framework for defining, reviewing, and achieving the organization&#8217;s objectives, values, and strategy with respect to the service&#8217;s Management System.<br \/>\n\u2022 To define and assign clear and specific responsibilities, creating the corresponding organizational structure. Among other measures, Gloval has appointed an ISMS Manager and established an Information Security Committee.<br \/>\n\u2022 Create and promote a culture of compliance throughout the organization through annual awareness and training programs.<br \/>\n\u2022 Integrate risk identification and management into the entire GLOVAL service process, prioritizing actions based on their impact and probability.<br \/>\n\u2022 Provide the different areas of the organization with the necessary resources for the proper functioning of the ISMS.<br \/>\n\u2022 Proactively seek to safeguard information security in its dimensions of Confidentiality, Integrity, and Availability.<br \/>\n\u2022 Comply with the requirements of the ISO\/IEC 27001:2022 standard.<br \/>\n\u2022 Comply with all applicable legal, regulatory, and contractual requirements regarding information security.<br \/>\n\u2022 Achieve continuous improvement of all processes related to the ISMS and to information security management.<br \/>\n\u2022 Ensure segregation of duties: Measures will be implemented to ensure that critical responsibilities within the ISMS are properly segregated to avoid conflicts of interest. This includes separating the functions of approval, implementation, and monitoring of security controls, promoting effective and independent oversight.<\/p>\n<p>&nbsp;<\/p>\n<p>Specifically, in daily security management, the following requirements will always be considered:<\/p>\n<p>&nbsp;<\/p>\n<p>\u2022 Prevention, detection, response, and retention in the event of security incidents.<br \/>\n\u2022 Continuous monitoring and periodic reassessment of the organizational context and associated risks.<br \/>\n\u2022 Clear differentiation of responsibilities throughout the organizational structure.<br \/>\n\u2022 Organization and implementation of the security process, ensuring compliance with the controls established in Annex A of the ISO\/IEC 27001:2022 standard.<br \/>\n\u2022 Risk analysis and management, documenting the impact and actions.<br \/>\nPreventive or corrective measures.<br \/>\n\u2022 Authorization and control of access, implementing measures such as multi-factor authentication and regular audits.<br \/>\n\u2022 Protection of physical and technological facilities.<br \/>\n\u2022 Acquisition of certified security products and services aligned with ISMS requirements.<br \/>\n\u2022 Application of the principle of least privilege in access management.<br \/>\n\u2022 Integrity and continuous updating of the information system.<br \/>\n\u2022 Protection of information both at rest and in transit through encryption and access controls.<br \/>\n\u2022 Prevention of vulnerabilities in interconnected systems.<br \/>\n\u2022 Activity logging and detection of malicious code.<br \/>\n\u2022 Business Continuity Plan to ensure operational continuity in the event of interruptions.<br \/>\n\u2022 Continuous improvement of the security process through periodic reviews and lessons learned from incidents.<\/p>\n<p>&nbsp;<\/p>\n<p>All documentation, records, and guidelines The documented aspects of the ISMS are managed in accordance with the documented procedures that Gloval has developed, taking into account the applicable national and international standards in each case.<\/p>\n<p>&nbsp;<\/p>\n<p>The Management of Gloval[\/vc_column_text][vc_button radius=&#8221;btn-circle&#8221; border_width=&#8221;0&#8243; scale_mobile=&#8221;no&#8221; el_class=&#8221;more-button download-btn&#8221; link=&#8221;url:%2Ffiles%2Fpolitica-de-seguridad-de-la-informacion.pdf|title:View%20PDF%3A%20Information%20Security%20Policy|target:_blank|&#8221; uncode_shortcode_id=&#8221;656094&#8243;]View PDF: Information Security Policy[\/vc_button][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row unlock_row_content=&#8221;yes&#8221; row_height_percent=&#8221;0&#8243; override_padding=&#8221;yes&#8221; h_padding=&#8221;0&#8243; top_padding=&#8221;0&#8243; bottom_padding=&#8221;0&#8243; back_color=&#8221;color-xsdn&#8221; back_image=&#8221;31663&#8243; back_repeat=&#8221;no-repeat&#8221; back_position=&#8221;center bottom&#8221; overlay_alpha=&#8221;0&#8243; equal_height=&#8221;yes&#8221; gutter_size=&#8221;3&#8243; column_width_percent=&#8221;100&#8243; shift_y=&#8221;0&#8243; z_index=&#8221;0&#8243; row_height_pixel=&#8221;200&#8243; el_class=&#8221;single-service-header [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-25330","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Information Security Policy<\/title>\n<meta name=\"description\" content=\"Information security policy: INFORMATION SECURITY MANAGEMENT SYSTEM MANUAL\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gloval.es\/en\/information-security-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Information Security Policy\" \/>\n<meta property=\"og:description\" content=\"Information security policy: INFORMATION SECURITY MANAGEMENT SYSTEM MANUAL\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gloval.es\/en\/information-security-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Gloval\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-07T08:53:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.gloval.es\/wp-content\/uploads\/2025\/05\/gloval-logo-2x.png\" \/>\n\t<meta property=\"og:image:width\" content=\"200\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/information-security-policy\\\/\",\"url\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/information-security-policy\\\/\",\"name\":\"Information Security Policy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/#website\"},\"datePublished\":\"2024-11-21T11:15:47+00:00\",\"dateModified\":\"2026-07-07T08:53:56+00:00\",\"description\":\"Information security policy: INFORMATION SECURITY MANAGEMENT SYSTEM MANUAL\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/information-security-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.gloval.es\\\/en\\\/information-security-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/information-security-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Information Security Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/\",\"name\":\"Gloval\",\"description\":\"Building Value\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/#organization\",\"name\":\"Gloval\",\"url\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.gloval.es\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/www.gloval.es\\\/wp-content\\\/uploads\\\/2019\\\/09\\\/logo.png\",\"width\":164,\"height\":64,\"caption\":\"Gloval\"},\"image\":{\"@id\":\"https:\\\/\\\/www.gloval.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/gloval\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCkw9j4VK89_5hSkmOmDk-Rg\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Information Security Policy","description":"Information security policy: INFORMATION SECURITY MANAGEMENT SYSTEM MANUAL","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gloval.es\/en\/information-security-policy\/","og_locale":"en_US","og_type":"article","og_title":"Information Security Policy","og_description":"Information security policy: INFORMATION SECURITY MANAGEMENT SYSTEM MANUAL","og_url":"https:\/\/www.gloval.es\/en\/information-security-policy\/","og_site_name":"Gloval","article_modified_time":"2026-07-07T08:53:56+00:00","og_image":[{"width":200,"height":200,"url":"https:\/\/www.gloval.es\/wp-content\/uploads\/2025\/05\/gloval-logo-2x.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.gloval.es\/en\/information-security-policy\/","url":"https:\/\/www.gloval.es\/en\/information-security-policy\/","name":"Information Security Policy","isPartOf":{"@id":"https:\/\/www.gloval.es\/en\/#website"},"datePublished":"2024-11-21T11:15:47+00:00","dateModified":"2026-07-07T08:53:56+00:00","description":"Information security policy: INFORMATION SECURITY MANAGEMENT SYSTEM MANUAL","breadcrumb":{"@id":"https:\/\/www.gloval.es\/en\/information-security-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gloval.es\/en\/information-security-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.gloval.es\/en\/information-security-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gloval.es\/en\/"},{"@type":"ListItem","position":2,"name":"Information Security Policy"}]},{"@type":"WebSite","@id":"https:\/\/www.gloval.es\/en\/#website","url":"https:\/\/www.gloval.es\/en\/","name":"Gloval","description":"Building Value","publisher":{"@id":"https:\/\/www.gloval.es\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gloval.es\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.gloval.es\/en\/#organization","name":"Gloval","url":"https:\/\/www.gloval.es\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.gloval.es\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.gloval.es\/wp-content\/uploads\/2019\/09\/logo.png","contentUrl":"https:\/\/www.gloval.es\/wp-content\/uploads\/2019\/09\/logo.png","width":164,"height":64,"caption":"Gloval"},"image":{"@id":"https:\/\/www.gloval.es\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/gloval\/","https:\/\/www.youtube.com\/channel\/UCkw9j4VK89_5hSkmOmDk-Rg"]}]}},"_links":{"self":[{"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/pages\/25330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/comments?post=25330"}],"version-history":[{"count":34,"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/pages\/25330\/revisions"}],"predecessor-version":[{"id":59188,"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/pages\/25330\/revisions\/59188"}],"wp:attachment":[{"href":"https:\/\/www.gloval.es\/en\/wp-json\/wp\/v2\/media?parent=25330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}