Skip to content

Information Security Management System 

SHOWERTHINKING, aware that the security of information related to our clients is a highly valuable asset, has established an Information Security Management System (ISMS) in accordance with the requirements of the ISO/IEC 27001:2022 standard in order to ensure the continuity of information systems and their continuous improvement, minimize the risk of damage, and guarantee compliance with established objectives.

The purpose of the Security Policy is to define the framework of action necessary to protect information assets against internal or external threats, whether deliberate or accidental, in order to ensure the confidentiality, integrity, and availability of information.

The effectiveness and implementation of the Information Security Management System is the direct responsibility of the Information Security Committee, which is responsible for the approval, dissemination, and enforcement of this Security Policy. On its behalf, an Information Security Management System Manager has been appointed, with sufficient authority to play an active role in the Information Security Management System by supervising its implementation, development, and maintenance.

The Information Security Committee will develop and approve the risk analysis methodology used within the Information Security Management System.

Any person whose activity may be directly or indirectly affected by the requirements of the Information Security Management System is required to strictly comply with the Security Policy.

At SHOWERTHINKING, all necessary measures will be implemented to comply with applicable regulations regarding general security and information security, including IT policies, the security of buildings and facilities, and the conduct of employees and third parties associated with SHOWERTHINKING in their use of information systems. The necessary measures to ensure information security through the application of standards, procedures, and controls must guarantee the confidentiality, integrity, and availability of information, which are essential to:

  • Comply with current legislation regarding information systems.
  • Ensure the confidentiality of the data managed by SHOWERTHINKING.
  • Ensure the availability of information systems, both for services provided to clients and for internal management.
  • Ensure the ability to respond to emergency situations by restoring the operation of critical services as quickly as possible.
  • Prevent unauthorized alterations of information.
  • Promote awareness and training in information security.