Security Policy

GRUPO AFIANZA ASESORES (hereinafter, AFIANZA) is an organisation specialised in providing professional accounting, labour, tax and legal advisory services, as well as financial and strategic consulting, auditing, insurance, Real Estate, human resources and computer services.

The AFIANZA Management considers information security an essential strategic element to guarantee the continuity of its activities, the trust of its clients and the protection of the information assets managed in the development of its services.

With this objective, AFIANZA has implemented an Information Security Management System (ISMS) aligned with the ISO/IEC 27001 standard and with the principles established in the National Security Scheme, which allows for the systematic management of the risks associated with the information and the systems that support it.

AFIANZA guarantees the protection of your information assets in accordance with the following fundamental principles:

• Confidentiality: The information is accessible only by authorized people.
• Integrity: The information is kept accurate, complete and protected from unauthorized modifications.
• Availability: The information and the systems that support it are available when required for the development of the activity.
• Traceability: The actions carried out on the systems and information are recorded and auditable.
• Authenticity: The identity of the users and the legitimate origin of the information are guaranteed.

To ensure compliance with these principles, AFIANZA undertakes to:

• Implement, maintain and continually improve the Information Security Management System.
• Identify, analyse and manage the risks associated with information security.
• Comply with applicable legislation, regulations and contractual requirements.
• Establish and periodically review information security objectives aligned with the organisation's strategy.
• Implement appropriate technical and organisational measures to protect information throughout its life cycle.
• Guarantee the continuity of services through the implementation of resilience and business continuity measures.
• Promote training, awareness and responsibility of personnel in matters of information security.

The AFIANZA Management assumes the commitment to lead and promote this Information Security Policy, ensuring the availability of the necessary resources for its application, as well as its communication and dissemination to all interested parties.

This policy is reviewed periodically to ensure its adaptation to the evolution of the organisation, security risks and the applicable regulatory framework.

Reviewed and approved by:
General Director
18/05/2026