Information Security Management Policy

The MLN Management, with the purpose of establishing the standards related to information security in the organization, creates the INFORMATION SECURITY COMMITTEE as a means to regulate and procedural information security measures and policies in compliance with current legislation on the National Security Scheme (ENS).

The functions of the Information Security Commission are:
• Study and analysis of the security strategies to be followed by the company.
• Designate the Security Manager to coordinate and control the execution of the security measures, standards and procedures defined in the ISMS. This Security Manager, once appointed, becomes a member of the Security Committee.
• Analysis of the ISMS modification proposals and associated documentation prepared by the Security Manager.
• Analysis of the corrective measures to be implemented, derived from the audit reports carried out on security matters.
• Review of the verification reports of correct compliance with the provisions of the ISMS issued by the Security Manager.
• Analysis of reports derived from incidents that seriously affect the Information Systems.
• Monitoring of the different established security actions.
• Implementation of security measures (technical and organizational) included in the ISMS.
• Guarantee the dissemination of the information security policy and any other relevant document or information, or the parts of it that are of interest, among the personnel who are affected.
• Establish the performance of an Audit to determine the degree of compliance with the ISMS. This Audit can be external or internal.
• The Information Security Committee is made up of at least the following members:
o IS Responsible
or Address
o Information and service manager
o Systems Manager
The Information Security Committee will meet periodically, ordinarily on the occasion of the annual System Review and on all occasions necessary, although it may be convened in an extraordinary manner by any of its members when deemed appropriate. After each meeting of the Information Security Commission, minutes will be drawn up of the topics discussed and those pending for the following period of time until the next call.