Security Policy
Last update: February 2026
1. Introduction
KLOUTIT's Security Policy reflects the concepts, principles, responsibilities and objectives regarding security, the results of which allow the company to guarantee the freedom of action it needs.
The objective of KLOUTIT's Comprehensive Security is to protect all people — users, professionals and employees alike — the confidentiality of their communications, and the availability and integrity of their information. It also safeguards other assets that make up the company's assets, such as facilities and content of all kinds.
Comprehensive Security encompasses the traditional concepts of physical security and logical (technological) security in order to maintain business continuity under any adverse circumstances.
An increase in the «security culture» among staff will provide clear benefits by enhancing the security of systems and procedures, and will minimise the risk of potential malicious actions. It is essential that all information relating to security matters flows through the appropriate channels both horizontally and vertically within the organisational unit.
2. Principles
Integration
Global Security is an integrated process aligned with the business activity, in which the entire company participates.
Cost-effectiveness
Security is guided by business criteria, taking into account the relationship between expenditure and investment. Its criteria are set centrally, taking advantage of any existing synergies. This management allows a better return on the effort applied to security.
Continuity
Security must be present throughout its entire work cycle: protection, prevention, detection, response and recovery.
Adequacy
The means used must be adapted to the business environment. Among other factors, competition with other companies, social, political and economic disruptions, and amateur or professional hacking stand out for their impact on the activity and on the organisation's security levels.
3. Responsibilities
The ultimate responsibility for security lies with the management team, which is directly responsible for managing its development and implementation.
The management team will analyse the security risks and vulnerabilities that may affect the proper functioning of the business and will propose the appropriate rules, means and measures to minimise them.
All staff in the organisation must take responsibility for maintaining the security of the assets in their care, observing the security rules implemented by the management team.
4. Objectives
To achieve and maintain the level of security required to adequately ensure business continuity, even in adverse situations.
To increase the integration and mutual support of the physical and logical aspects of security.
To collaborate in the management of other security disciplines, including labour and environmental aspects, in accordance with criteria that promote Corporate Social Responsibility.
To establish the corporate security structure defined by the organisation's decision-making bodies and create appropriate communication channels between all those involved.
To comply with official security regulations and other requirements.
To establish and implement Security Training and Awareness Plans to improve staff training.
Express commitment to continuous improvement.
To integrate the different departments of the company into a security management system that, under common criteria, takes advantage of synergies and achieves consistency in resources and actions.
All KLOUTIT staff will be aware of and apply the regulations that develop this Security Policy.