Company policies

SEFIRA spol. s r.o. follows generally applicable policies and standards.

Integrated Management System Policy - ISM

The vision and philosophy of SEFIRA spol. s r.o. in the area of quality assurance and improvement of services, environmental protection and information security is reflected in the adopted and approved Integrated Management System Policy, which the management of SEFIRA spol. s r.o. also undertakes to ensure:

Personal participation and support of the ISM implementation project in SEFIRA spol. s r.o.
Quality Resource Care - Management will continuously create resources for the function and continuous improvement of the ISM system.
High quality and service - with an emphasis on safety.
Understanding of information security requirements - Management will continually ensure that activities are undertaken to ensure that all employees, external partners and third parties understand the importance of information security.
Risk elimination - the management of the company is committed to plan, implement, control and improve the system of risk identification and management in all areas of the integrated system.
Application of ISM for the benefit of the customer - the management is committed to using and orienting the effectiveness of the ISM system so that it brings lasting benefit and safety to the partners and customers of SEFIRA spol. s r.o. and thus contributes to their satisfaction with this partnership.
Enforcement of consistent application of legal requirements - within the setting of standards, processes.
Engaging in trends towards environmental protection - focusing on waste management, paper saving and energy conservation.
Continuous Improvement - Management is committed to the consistent application of the PDCA process management system based on objective measurement that will lead to continuous improvement of all elements of ISM.

Information Security Policy - ISMS

The management of SEFIRA spol. s r.o. announces this Information Security Management Policy in accordance with the requirements of the ISO/IEC 27001 standard.

The company's management is committed to:

Plan and release resources to develop and continuously improve the effectiveness of the information security management system.
To support by all appropriate management means the continuous improvement of the effectiveness of the information security management system.
Regularly and systematically assess information security risks and set effective measures to eliminate them.
Regularly plan Information Security Management Objectives, monitor and review their implementation and use them as an important tool for improvement and prevention of security incidents.
To ensure that all employees of the company are aware of the importance of the information security management system for the development of the company and for gaining customer trust.
To ensure that all employees of the company are aware of the importance of all the activities carried out to ensure a permanent, stable and continuously improving security of information provided by the company to its customers.
Regularly review the effectiveness of the information security management system and accept opportunities for improvement of the information security management system.
Work closely with partners and vendors to integrate efforts leading to planned information security criteria.
Use customer requirements and recommendations to develop the information security management system.
Apply the requirements of legal standards for the protection of personal data.