The purpose of this Information Security Policy is to protect ENFASYS's information assets.

Since its inception, ENFASYS’s management has regarded information security as a key strategic factor in the provision of the following services:
  • Design, development, and implementation of hardware and software systems for advanced technological solutions in energy management (EMS) and power management (PMS),
  • Design, development, and implementation of hardware and software systems for advanced technological solutions for managing battery-based energy storage systems (BMS: Battery Management System),
Therefore, it has decided to implement and certify an information security management system for those services, based on the requirements of the ISO/IEC 27001 standard.

Through this information security policy statement, ENFAYS management commits to:

Protecting information assets against losses of availability, confidentiality, and integrity.
Compliance with applicable legal requirements and those established by our clients.
Compliance with business requirements regarding information security and information systems.
Training and raising awareness among all staff regarding adherence to the basic principles that underpin information security management.
Periodic and ongoing review of the degree of compliance with and implementation of the information security management system, as well as continuous improvement of its effectiveness and efficiency.
Establishing, reviewing, and updating information security objectives that are measurable and consistent with the business, as well as periodically measuring and evaluating performance.
The proper management of security incidents, including their reporting and handling, in order to improve the system’s effectiveness.
Raising staff awareness of the need to comply with information security requirements in their work and the importance of their active participation in achieving planned goals and objectives.
It is the obligation of all ENFASYS staff to know, understand, and respect the content and principles included in this security policy.

This Security Policy is available on the ENFASYS intranet, as well as on the website, where it is publicly accessible to interested parties.

This policy has been approved by ENFASYS management and will be reviewed annually.

Date: August 14, 2026