GMV steps up its commitment to information security

GMV’s Information Security Management System (ISMS) has extended the scope of the certification compliant with the ISO/IEC 27001:2013 standard, which guarantees the security of customer, collaborator, and employee information in accordance with national legislation and international standards on data protection and privacy.

Information security is essential to GMV’s processes and has therefore been a priority since its inception. The aim of the ISMS is to define, implement, and improve controls and procedures to minimize and properly manage risks associated with the organization’s internal processes. These risks are related to developing products and systems; executing projects, programs, and services; and managing customer, collaborator, and employee data. The system is also used to ensure compliance with all legal obligations relating to data protection and privacy.

GMV’s ISMS was previously certified against the ISO 27001 standard for the information security activities of its information systems in the logical security and ICT systems sectors. In line with GMV’s strategy of continuous improvement, the organization decided in 2022 to move forward in this area and make qualitative improvements to its ISMS. As a result of these efforts, the accredited registrar has now extended the certification, based on the same ISO standard, to the company’s processes in space, aeronautics, defense and security, cybersecurity, intelligent transportation systems, automotive, healthcare, and telecommunications sectors at its Spanish offices in Madrid and Valladolid.

Maintaining our commitment to information security is a job shared by all members of the organization. GMV, therefore, involves its entire workforce and carries out awareness-raising and training activities that address the main risks in this area and the best practices to be implemented to protect the organization and avoid compromising the smooth running of GMV’s business.