Information Security Policy

AMAZING SALES CONSULTING S.L. (hereinafter, AMAZING) is an organization dedicated to the design, planning, execution, and monitoring of graphic communication strategies and digital advertising campaigns.

Due to our activity, at AMAZING we are aware that information (including client strategies, campaign data, and intellectual property) is an asset of high value to our organization and therefore requires appropriate protection and management in order to ensure business continuity and minimize potential damage caused by failures affecting the integrity, availability, and confidentiality of information.

For this reason, AMAZING, through the development and implementation of this Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022, undertakes the following commitments:

• To develop solutions and services in compliance with applicable legal requirements, identifying the legislation applicable to the organization’s business lines included within the scope of the ISMS.
• To ensure that access to and use of information systems are carried out securely and in accordance with established policies.
• To conduct information security risk assessments in order to identify and implement controls that mitigate the impact of identified risks.
• To promote a culture of continuous improvement in information security management and to implement improvements based on the analysis of incidents, audits, and periodic reviews.
• To develop and maintain business continuity and disaster recovery plans.

To properly manage the information lifecycle, preventing improper use at any of its stages.

To prevent and detect viruses and other malicious software through the development of specific policies and the establishment of contractual agreements with specialized organizations.

To ensure the protection of intellectual property rights.

To maintain the brand’s reputation with regard to data security.

To provide information security training and awareness programs for all employees and other interested parties.

To periodically establish a set of objectives and indicators that enable management to adequately monitor service levels and management activities.

To act at all times in accordance with the highest standards of professional ethics.

Top management commits to providing the necessary resources to maintain and improve the Information Security Management System (ISMS).

The ISMS of AMAZING applies to:

• The design, planning, execution, and monitoring of graphic communication strategies and digital advertising campaigns, covering all business operations and all systems, information assets, and devices used in the provision of Content & Creatives, Retail Media, Data Consulting, and Ad-Tech Stack services.