{"id":4325,"date":"2026-02-03T09:17:12","date_gmt":"2026-02-03T08:17:12","guid":{"rendered":"https:\/\/radiologia-sa.com\/?page_id=4325"},"modified":"2026-04-20T15:41:51","modified_gmt":"2026-04-20T13:41:51","slug":"politica-de-seguridad","status":"publish","type":"page","link":"https:\/\/radiologia-sa.com\/en\/politica-de-seguridad\/","title":{"rendered":"SECURITY POLICY"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"4325\" class=\"elementor elementor-4325\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2d59f558 e-flex e-con-boxed e-con e-parent\" data-id=\"2d59f558\" data-element_type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;arrow&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"false\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewbox=\"0 0 700 10\" preserveaspectratio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M350,10L340,0h20L350,10z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6623c50 elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"6623c50\" data-element_type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">SECURITY POLICY<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6d9f252 animated-slow elementor-hidden-desktop elementor-hidden-tablet elementor-hidden-mobile elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"6d9f252\" data-element_type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Who are we?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-572b9d8a e-flex e-con-boxed e-con e-parent\" data-id=\"572b9d8a\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6ad25dba sci-fi-border bottom elementor-widget elementor-widget-text-editor\" data-id=\"6ad25dba\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2><strong>Object<\/strong><\/h2>\n<p>RADIOLOG\u00cdA S.A.U. reconoce la importancia cr\u00edtica de las Tecnolog\u00edas de la Informaci\u00f3n y las Comunicaciones (TIC) para el cumplimiento de sus objetivos la venta de productos y la prestaci\u00f3n de los servicios. La seguridad de la informaci\u00f3n se concibe como un proceso integral y continuo, destinado a preservar la <strong>confidentiality, integrity, availability, traceability and authenticity<\/strong> of the organization's information and services.<\/p>\n<h2><a name=\"_Toc213830187\"><\/a><strong>Scope<\/strong><\/h2>\n<p>Esta pol\u00edtica es aplicable a todos los empleados y colaboradores de RADIOLOG\u00cdA S.A.U. (la organizaci\u00f3n) as\u00ed como al Sistema de Gesti\u00f3n de Seguridad de la Informaci\u00f3n (SGSI) que da soporte a los procesos y servicios de la entidad y al tratamiento de la informaci\u00f3n de clientes, empleados y terceros.<\/p>\n<h2><a name=\"_Toc213830188\"><\/a><strong>Principles<\/strong><\/h2>\n<p>The fundamental principles of the Information Security Policy are:<\/p>\n<ol>\n<li><strong>Safety as an integral process<\/strong>The combination of human, technical, organizational and legal factors, promoting the awareness of all professionals.<\/li>\n<li><strong>Risk-based security management<\/strong>Continuous assessment and treatment of threats and vulnerabilities, applying measures proportional to the value and criticality of the information.<\/li>\n<li><strong>Prevention, detection, response and recovery<\/strong>The following are some of the key elements: establishment of controls required by the ENS, monitoring mechanisms, detection of deviations and continuity plans.<\/li>\n<li><strong>Lines of defense<\/strong>Multi-layered protection (organizational, physical and logical) to mitigate the impact of incidents.<\/li>\n<li><strong>Continuous monitoring and re-evaluation<\/strong>Periodic updating of security measures according to technological and risk evolution.<\/li>\n<\/ol>\n<h2><a name=\"_Toc213830189\"><\/a><strong>Security Requirements<\/strong><\/h2>\n<p>RADIOLOG\u00cdA S.A.U. aplica medidas en los siguientes \u00e1mbitos clave:<\/p>\n<ul>\n<li><strong>Security governance and organization<\/strong>Clear roles and responsibilities, clear policies and procedures.<\/li>\n<li><strong>Risk management<\/strong>Periodic analysis and mitigation measures.<\/li>\n<li><strong>Personnel management<\/strong>Security training and awareness-raising.<\/li>\n<li><strong>Access control and principle of least privilege<\/strong>.<\/li>\n<li><strong>Physical and logical protection of installations and systems<\/strong>.<\/li>\n<li><strong>Selection of reliable security products and services<\/strong>.<\/li>\n<li><strong>System integrity and upgrades<\/strong>.<\/li>\n<li><strong>Protection of information at rest and in transit<\/strong>.<\/li>\n<li><strong>Incident management and business continuity<\/strong>.<\/li>\n<\/ul>\n<h2><a name=\"_Toc213830190\"><\/a><strong>Legal and Regulatory Framework<\/strong><\/h2>\n<p>The policy aligns with:<\/p>\n<ul>\n<li><strong>Royal Decree 311\/2022<\/strong>, of May 3 (National Security Scheme).<\/li>\n<li><strong>Regulation (EU) 2016\/679 (GDPR).<\/strong>) y<strong> Organic Law 3\/2028 (LOPDGDD)<\/strong><\/li>\n<li><strong>ISO\/IEC 27001:2022 Standards<\/strong> and internal safety regulations.<\/li>\n<\/ul>\n<h2><a name=\"_Toc213830191\"><\/a><strong>Organizational structure<\/strong><\/h2>\n<p>The security model is articulated through:<\/p>\n<ul>\n<li>Information Security Committee<\/li>\n<li>Responsible for the information<\/li>\n<li>Responsible for the Service<\/li>\n<li>Security Manager<\/li>\n<li>System Manager<\/li>\n<li>Data Protection Delegate.<\/li>\n<\/ul>\n<p>The Security Manager is the single point of contact for security matters for the entire organization in case any additional information is required.<\/p>\n<h2><a name=\"_Toc213830192\"><\/a><strong>Risk management <\/strong><\/h2>\n<p>All systems subject to this policy must undergo risk assessment on a regular basis (at least annually or after significant changes), under the coordination of the Security Committee. This Committee shall establish homogeneous criteria and promote the necessary resources to maintain adequate security levels.<\/p>\n<h2><a name=\"_Toc213830193\"><\/a><strong>Commitment to Continuous Improvement<\/strong><\/h2>\n<p>RADIOLOG\u00cdA maintains a constant commitment to the resilience of its systems, ICT security training and awareness, agile response to incidents, collaboration with the competent authorities and continuous updating of its management model and security controls.<\/p>\n<h2><a name=\"_Toc213830194\"><\/a><strong>Documentation and control<\/strong><\/h2>\n<p>The ISMS is organized hierarchically in an Information Security Policy, internal rules and procedures, and technical manuals with their corresponding records, whose documentation is managed in accordance with the Documentation Control procedure to ensure its correct approval, review, classification, accessibility and distribution.<\/p>\n<h2><a name=\"_Toc213830195\"><\/a><strong>Obligations of users <\/strong><\/h2>\n<p>Todos los empleados de RADIOLOG\u00cdA S.A.U. deben:<\/p>\n<ul>\n<li>Know and comply with the Security Policy and the Information Security Manual.<\/li>\n<li>Participate in annual training and awareness sessions.<\/li>\n<li>Report security incidents to the Security Manager.<\/li>\n<li>Use technological resources in accordance with established standards.<\/li>\n<\/ul>\n<h2><a name=\"_Toc213830196\"><\/a><strong>Relations with third parties <\/strong><\/h2>\n<p>Cuando la organizaci\u00f3n RADIOLOG\u00cdA S.A.U. preste o reciba servicios que impliquen el tratamiento de informaci\u00f3n, los contratos incluir\u00e1n cl\u00e1usulas espec\u00edficas sobre seguridad, reporte de incidentes y responsabilidades. Los terceros deber\u00e1n cumplir los mismos niveles de seguridad y formar a su personal de forma equivalente a los est\u00e1ndares de la organizaci\u00f3n.<\/p>\n<h2><a name=\"_Toc213830197\"><\/a><strong>Approval and validity <\/strong><\/h2>\n<p>This policy, of a public nature, was approved by the General Management on November 11, 2025, and will be reviewed annually by the Information Security Committee or earlier if significant changes occur.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>POL\u00cdTICA DE SEGURIDAD \u00bfQui\u00e9nes somos? Objeto RADIOLOG\u00cdA S.A.U. reconoce la importancia cr\u00edtica de las Tecnolog\u00edas de la Informaci\u00f3n y las Comunicaciones (TIC) para el cumplimiento de sus objetivos la venta de productos y la prestaci\u00f3n de los servicios. La seguridad de la informaci\u00f3n se concibe como un proceso integral y continuo, destinado a preservar la [&hellip;]<\/p>","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-4325","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/pages\/4325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/comments?post=4325"}],"version-history":[{"count":10,"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/pages\/4325\/revisions"}],"predecessor-version":[{"id":4763,"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/pages\/4325\/revisions\/4763"}],"wp:attachment":[{"href":"https:\/\/radiologia-sa.com\/en\/wp-json\/wp\/v2\/media?parent=4325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}