Definition of the Policy

The information security management system Policy is the foundational document of the Information Security Management System (ISMS) and is defined by the company's top management in cooperation with our co-workers. Our goal is to achieve a long-term sustainable business, maximizing customer satisfaction while respecting the needs of our co-workers and stakeholders.

 ​

Management Statement

In accordance with the requirements of ​ISO/IEC 27001 ​standard, The company's management has declared the ITSM Policy as its commitment. Management's intention is to adhere to the principles of the ISMS Policy and the ISMS system as such. Furthermore, it supports ISMS goals based on the Company's Strategy and Vision, ensures appropriate processes necessary for ISMS management and constantly improves this system.

 ​

Goals of the Policy

The main goals of the Policy are:

• Declare information security as one of the basic pillars of the company's governance.
• Define basic measures and rules for ensuring information security in the company.
• Identify competencies, responsibilities and provide adequate resources.
• Continuously develop and improve the information security management system.

 ​

Basic Information

We define information security as ensuring the confidentiality, integrity and availability of information, information systems and assets in any form.

This policy and its associated documents apply to all co-workers of the company and third parties who access, process or otherwise handle information assets.

The subject of protection includes all information assets of the company, regardless of their form, method of storage or place of processing. Information assets that have been provided to the company by third parties are also subject to protection.

 ​

Key Principles

The company's Information Security Management System is based on the following measures and principles:

• Organization of information security.
• Human resources security, security awareness and the security of suppliers relationships.
• Asset and risk management.
• Access control and users responsibilities.
• Physical security.
• Equipment and communication security.
• Operations security.
• Secure software development life cycle (SSDLC).
• Incident management.
• Business continuity management.
• Personal data protection.
• Compliance with legal requirements and best practices.

 ​

The company applies all controls of the Annex A of ​ISO/IEC 27001 ​(SoA). Individual measures and processes are defined in the following internal documents and comply with this Policy. The scope is defined in the Statement of Applicability.

These key principles also define the ​Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere to generally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

 ​

Competencies and review of the ISMS Policy

The ISMS Policy is reviewed annually by the company's top management as part of continuous improvement.

The ISMS manager is entrusted with the management of information security. The ISMS manager has the appropriate resources allocated to him and is directly responsible for the company's management.

 ​

Definition of the Policy

The environmental and sustainability Policy is the foundational document of the Environment Management System (EMS) and is defined by the company's top management in cooperation with our co-workers. Our goal is to achieve a long-term sustainable business, maximizing customer satisfaction while respecting the needs of our co-workers and stakeholders and minimizing the environmental footprint.

 ​

Management Statement

In accordance with the requirements of the ​ISO 14001 ​standard, The company's management has declared this Policy as its commitment. Management's intention is to adhere to the principles of the EMS Policy and the EMS system as such. Furthermore, its supports EMS goals based on the Company's Strategy and Vision, ensures appropriate processes necessary for EMS management and constantly improves this system.

 ​

Goals of the Policy

The main goals of the Policy are:

• Compliance with environmental regulations and standards.
• Prevention of environmental pollution by reducing waste production and sorting waste.
• Utilization of green energy, renewable resources, and materials.
• Education and training of co-workers.
• Creation of smart solutions.

 ​

Basic Informations

Company eliminates potential hazards and minimizes threats to the environment in our business activities. Our goal is to reduce the impact on the environment not only by ourselves but by our clients, partners and suppliers as well. During the ISO 14001 certification process, we have declared and proved that company has established such a management system that ensures the protection of the environment, long-term sustainability of our business and fulfillment of all legislative requirements concerning the protection of the environment. ​

 ​

Key Principles

The principles of sustainability and environmental protection are an integral part of thinking, behaviour and work habits of all our co-workers, partners and suppliers. Therefore we lead our co-workers and suppliers to realize how their activities contribute to the sustainability of our business and to the protection of environment. The competence and awareness of our co-workers is increased by regular trainings, e-courses and educational campaigns. We are developing the culture of sustainability as an essential part of our work and decision making. Our management leadership is an authority and inspiration for our co-workers, partners, suppliers and even customers.

The protection of environment, including the prevention of pollution, is one of our top priorities. Therefore we only use the safe and proven technologies that pose no threat to the environment. Our company strives to minimise waste – using offices in buildings with a low environmental impact and encouraging resource saving and responsible waste disposal. We encourage the use of electric cars among our employees as well as the overall transition to e-mobility. Our electrical appliances and vehicles are maintained with minimum environmental impact by professional service providers. We assess the environmental and sustanability aspects of our products and services throughout their entire lifecacle. It is our objective to achieve not only the sustainability of our business but also help our customer achieve the same, by delivering efficient IT solutions for energy management, e-mobility or paperwork reduction.

We meet all legal requirements concerning the environmental protection, the legal compliance is a matter-of-course in all our activities. Therefore we keep track of all our stakeholders, their requirements and expectations, we are actively monitoring the new legislature and we act according to internationally recognized industry practices. The fulfullment of all legal obligations we require and observe not only with our co-workers but with our suppliers and partners.

The sustainability and environmental protection are an integral part of our managment system. The environmental requirements are a natural part of our processes and activities and help us to fulfill our mission which is the social responsibility of all aspects of our business. We make sure that there are sufficient resources for this purpose, especially qualified and motivated staff, necessary IT systems and sufficient financing. We set down clear goals that we transparently communicate and evaluate. We use audits to identify and assess potential risks on a regular basis, in order to adopt measures to protect the environment. We continually improve the system of environmental management in line with the industry best practices.

We require the same approach to sustainability and environmental protection from our suppliers. When selecting the suppliers and establishing partnerships, we take into account their attitudes towards the environment and sustanability. We promote that also our suppliers, partners and clients only use safe, proven and environmentt-fiendly technologies. Also the co-workers of our suppliers and partners must be personally liable for legal compliance and the environmental protection must become an integral part of their thinking, behaviour and work habits. We support our suppliers to understand the impacts of their activities on the environment and help them imrove their performance by establising the environmental nad quality management systems.

These key principles also define the ​Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere to generally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

 ​

Sustainability

The long-term sustainability of our business is our top priority. It is not only the sustainable operation of company but also the products and solutions that we build and deliver to our customers, helping them achieve the same. You can find out more at ​Smart and Sustainable Solutions.

Competencies and review of the Policy

The EMS Policy is reviewed annually by the company's top management as part of continuous improvement.

The EMS manager is entrusted with the company's management. The EMS manager has the appropriate resources allocated to him and is directly responsible to the company's management.

 ​

Definition of the Policy

The quality Policy is the foundational document of the Quality Management System (QMS) and is defined by the company's top management in cooperation with our co-workers in an effort to maximize customer satisfaction while respecting the needs of its co-workers and other stakeholders by establishing and adhering basic rules.

 ​

Management Statement

In accordance with the requirements of the ​ISO 9001 ​standard, ​The company's management has declared the QMS Policy as its commitment. Management's intention is to adhere to the principles of the QMS Policy and the QMS system as such. Furthermore, it supports QMS goals based on the Company's Strategy and Vision, ensures appropriate processes necessary for QMS management and constantly improves this system.

 ​

Goals of the Policy

The main goals of the Policy are:

• Improving the quality of products and services.
• Increasing the efficiency of processes.
• Training and development of co-workers.
• Increasing customer satisfaction.
• Support for continuous improvement.

 ​

Basic Informations

The company is a renowned European company providing the largest information systems and solutions in the area of information and communication technologies. We are focused on providing solutions, which provide a high added value while also delivering a competitive business advantage to its clients. We have been serving our clients since 1990 and over the years, we have developed a number of high-end, large-scale solutions, which are being used to serve the IT needs of important companies in many of the key sectors of the economy. We have the best references from companies in banking, insurance, energy and utilities, communication and media, manufacturing, trade and the government. We take care that our products and services comply with demanding requirements - quality, image, effectiveness.

• Integration ​– We provide solutions for business needs and information system integration.
• Building Up ​– We design and implement large-scale information systems that meet the business requirements of the customer and give the necessary support in their business.
• Operation ​– We secure the operation of information systems and the necessary supervision and management of IT infrastructure, we ensure the availability of IT functionality for users.
• First Line Support ​– We provide effective and immediate assistance to users of information systems with solutions to known issues including the provision of alternatives.
• Second Line Support ​– We guarantee solutions to problems arising from the use of an information system and provide support to deal with new and non-standard operation tasks. ​
• Infrastructure ​– We provide a comprehensive supply network and communication infrastructure, computer security, HW and SW components and cloud.
• Education ​– We provide standardized catalog training, we create custom courses and implement long-term targeted training programs.
• Consultancy ​– We help our customers set up business processes and IT environments so that IT solutions support the business plans.

 ​

Key Principles

We compiled these 10 key principles sometime around 1994. We try to keep them. These are great principles and they are still valid.

• System approach
• Delegation of competences
• Focus on customers and co-workers
• Target orientation
• Standardization of processes
• Continuous assessment
• Information sharing
• Memory and lessons learned
• Continuous improvement
• Stability and security

These key principles also define the ​Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere togenerally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

 ​

Competencies and review of the Policy

The QMS Policy is reviewed annually by the company's top management as part of continuous improvement.

The QMS manager is entrusted with the company's management. The QMS manager has the appropriate resources allocated to him and is directly responsible to the company's management.

 ​

This policy is the basic document of the company's Anti-bribery management system (ABMS).

In accordance with the requirements of ISO/IEC 37001, management has declared this Anti-Bribery Policy (ABMS Policy) as its commitment. It is management's intention to promote the objectives and principles of anti-bribery.

The Company has adopted this Anti-bribery policy and internal Anti-bribery directive, which sets out the Company's general anti-corruption policies, compliance obligations, anti- bribery and conflict of interest rules.

This Anti- Bribery Policy sets out the commitments for the Company's co-workers to enforce anti-corruption and anti-bribery and conflict of interest rules. It is therefore the Company's tool through which the Company achieves its objectives set out in the Anti- Bribery and Corruption Prevention Policy. This policy is also addressed to all the Company's business partners.

The Anti-Corruption Directive, based on the Company's Anti-Corruption Policy, aims to declare to its co-workers and partners its commitment to support the fight against corruption and bribery and to comply with the rules against conflicts of interest.

The Anti- Bribery Directive is linked, among other internal regulations of the company.

 ​

 ​

Objectives of the anti-bribery system

The main objective is to establish a framework for the required conduct of the Company's associates in relation to the Company's significant areas of activity in terms of the risk of corruption, bribery, illegal conduct and conflict of interest. In particular then:

• Determine the binding rules of conduct and behaviour that associates are obliged to follow both in the performance of their tasks or in connection with them and in the course of business dealings with the Company's business partners.
• To set out the responsibilities of co-workers and the company itself in relation to corruption, bribery, conflict of interest rules and compliance with the law in general.
• Declare the company's commitment to its business partners and third parties in terms of compliance with the law, the fight against corruption and bribery and the rules against conflicts of interest.
• Provide information and guidance to the Company's co-workers to identify and address issues related to corruption, bribery and conflict of interest.
• Describe the consequences of failing to comply with the obligations set by the Company in the area of anti-bribery.
• Introduce business partners to the company's ABMS principles and require them to follow the same.

Specific objectives are regularly defined in collaboration with the company's management and are measured and evaluated.

 ​

 ​

Scope of the ABMS policy

This policy applies to all company co-workers and third parties in accordance with the defined ABMS boundaries.

Co-workers are obliged to ensure, as far as possible, compliance with the defined provisions and, where applicable, with equivalent or comparable regulations issued by third parties with whom the Company maintains business relationships (suppliers, customers, partners, non-profit organisations, etc.) and who require this commitment in the context of their relationship with the Company, provided that they have been duly informed of them.

Competence and revision of the ABMS policy

The ABMS policy is reviewed regularly at least once a year by the management on the basis of the principle of continuous improvement.

Information security management is entrusted to the ABMS Manager, who is allocated appropriate resources and reports directly to the company management.

Reporting violations of anti-bribery principles

The Company encourages and encourages its co-workers or third parties to report any suspected violations of the Anti- Bribery Policy, and the Company provides full support to its co-workers and third parties in this regard. Reports can be made, inter alia, to the statutory body or through the Compliance link (Compliance ​Officer), under your own name or anonymously, according to the description of the reporting system.

The company takes violations of the anti-bribery rules very seriously and draws the appropriate consequences for each such violation.

Retaliation against co-workers and other related persons who have made a complaint is not permitted.