The information systems security policy of NUMERYX Tunisia is based on the following strategic axes:
- Ensure compliance with internal, normative, legal, regulatory and contractual requirements (PIP, clients, etc.) in order to fully meet information security obligations.
- Strengthen the continuous training and awareness of employees to improve their understanding and management of security issues, thus embedding a security culture in daily work.
- Implement a process for regularly assessing information systems security performance and identify opportunities for continuous improvement to optimize the security posture.
- Be attentive to the expectations of clients and subcontractors, , by actively responding to their specific security needs and integrating their feedback into our security strategy.
- Carry out continuous security risk assessments and deploy appropriate mitigation measures to protect information assets against potential threats.
- Integrate security measures from the initial phases of each project or activity to support growth while respecting our overall security strategy.
- Guarantee the protection of the company’s data, as well as that of our clients and partners, by preventing its disclosure, alteration or accidental or intentional loss.
- Ensure the continuity of activities and services in the event of security incidents, by putting in place effective and proven continuity plans.
- Maintain robust mechanisms to ensure traceability, non-repudiation and authentication of access to sensitive information.
- Comply with the regulations in force and relevant international standards to ensure appropriate information security management.
- Align information security initiatives with the company’s business objectives to effectively support operations and corporate strategy.
- Protect the company’s image and reputation, both internally and externally, by ensuring rigorous information security management and fostering trust among stakeholders.
