ISO

ISO 27001:2013

ISO/IEC 27001:2013 standard developed by an international group of experts determines the requirements for the establishment, implementation, application, monitoring, reviewing, maintaining and improving a documented Information Security Management System (ISMS) in the overall context of the business activities of an organization.

Due to the subject of the business, awareness of the threats posed by non-compliance of the information management processes as well as special attention to data security, Fortunato S.A. on 31 July 2012 for the first time obtained the certificate of compliance of the applied security measures with international standards determined by ISO/IEC 27001:2005 standard (new version of 27001:2013).

When taking business decisions, the Board of Fortunato S.A. pays special attention to the question of information security, therefore, the Information Security Management System is developed within the company, and the investments for this purpose are treated by management with high priority.

Every year, the Company is subject to audits by certified outdoor units, to confirm that the implemented security meets the highest standards, whereas skilled employees are aware of their role in developing an organization which processes information in a secure way. This confirms that all of the Company's activities meet very high safety standards for the protection of information, including safety of the processed data in information systems, as well as in terms of the physical protection of data in our possession.

On 6 September 2016 Fortunato S.A. received the certificate on the conformity of its Information Security Management System with the new version of ISO/IEC 27001:2013.