Information Security Policy
TELYNET GROUP is a multinational technology company of Spanish origin specializing in the development, implementation, technical support and evolutionary maintenance of software solutions for sales force automation (SFA - Sales Force Automation) for the purpose of centralizing and managing the product catalog, parameterizing business rules, executing omnichannel commercial transactions, and comprehensive control of delivery logistics.
It is made up of the following companies:
- Telynet, SA: This is the group's parent company , incorporated in Alcobendas (Madrid). It holds the intellectual property rights to the software solutions ( Telynet Sales Suite 360 ), the corporate strategy, and global executive management.
- Tely México Net, SA de CV: Subsidiary based in Mexico City (Paseo de la Reforma). It is the key operational and commercial hub for the Mexican market and northern Latin America.
- Telynet USA, LLC: A corporate entity registered in Delaware (USA) dedicated to serving multinational clients and expanding in the North American market.
- Telynet Caribe, SRL: Company located in Santo Domingo (Dominican Republic), responsible for marketing and implementation in the Caribbean basin.
TELYNET GROUP has implemented an Information Security Management System based on the requirements of the ISO 27001:2022 standard with the objective of ensuring that all information technology assets and resources are used and managed in a way that protects their confidentiality, integrity and availability and intended to ensure the continuity of business lines, minimize damage and maximize return on investment and continuous improvement.
The Management of GRUPO TELYNET , through the development and implementation of this Information Security Management System, undertakes the following commitments:
- Develop solutions and services that comply with legislative requirements, identifying the legislation applicable to the business lines developed by the organization and included in the scope of the ISMS.
- Establish and meet contractual requirements with stakeholders.
- Provide information security training and awareness programs for all employees and other stakeholders.
- Prevent and detect any viruses and other malicious software, through the development of specific policies and the establishment of contractual agreements with specialized organizations.
- Conduct information security risk assessments to identify and implement controls to mitigate the impact of identified risks.
- Develop and maintain business continuity and disaster recovery plans
- Establishment of the consequences of violations of the security policy, which will be reflected in the contracts signed with stakeholders, suppliers and subcontractors.
- Promote a culture of continuous improvement in information security management and implement improvements based on incident analysis, audits, and periodic reviews.
- Act at all times within the strictest professional ethics.
- Ensure that access to and use of information systems is carried out securely and in accordance with established policies.
- Maintain the brand's reputation regarding data security.
- Properly manage the information lifecycle, so that misuse can be avoided during any of the phases.
- The organization's staff will participate in the management of service-related incidents and information security management in order to restore normal service operating levels as quickly as possible and minimize the adverse impacts of such incidents on the organization.
- Ensure the protection of intellectual property rights.
- Periodically establish a set of objectives and indicators that allow management to properly monitor the levels of service offered and management activities.
- Senior management is committed to providing the necessary resources to maintain and improve the Information Security Management System (ISMS).