Information Security Policy

Iamones S.r.l. bases its mission on the ability to offer companies highly advanced technological solutions
for managing the lifecycle of digital identities.

In order to best protect its information assets, Management has decided to implement an Information
Security Management System (ISMS), defined in accordance with the requirements of the international
standard ISO/IEC 27001, which applies to all activities identified within the scope of the management system itself.

The principles that inspire this policy are:
● ensure all stakeholders an adequate level of security for data and information;
● develop and deliver solutions by identifying, assessing, and treating the risks to which they are exposed;
● preserve as best as possible the company’s image as a secure and reliable partner;
● protect the information assets;
● fully comply with the requirements of applicable and mandatory laws and regulations;
● increase, among its personnel, the level of awareness on security topics;
● pursue the continuous improvement of information security performance.

To make the application of these principles effective, Management undertakes to:
● promote within the organization a sense of involvement, the culture, and appropriate methodologies so that anyone working within the organization can best apply the most
appropriate security measures;
● provide the necessary resources for its implementation, including personnel, financial resources,
processes, tools, and required technologies;
● define roles and assign responsibilities related to the various areas of information security;
● prepare a manual and develop specific policies and procedures to support the proper execution of
the required processes;
● subject the management system to periodic audits conducted with absolute objectivity and impartiality;
● review this policy and the specific policies regularly to identify any changes that may affect it, ensuring that it remains suitable over time.

Imola (ITALY), 27/02/2025