Integrated Policy for Quality, Information Security, Business Continuity, Service Management, and Environmental Management - Adam

Adam, with extensive experience in information technology, recognises the importance of ensuring excellence in the Data Centre Services, associated Communications, and IaaS solutions offered to its clients.

To this end, it has developed this integrated policy, which aligns the Management System’s objectives with the organisation’s strategic goals, business requirements, customer needs, and stakeholder expectations. This policy promotes service quality, information security, business continuity, effective service management, and environmental protection.

The Integrated Management System is implemented in accordance with ISO 9001 (Quality Management), ISO/IEC 27001 (Information Security Management), ISO 22301 (Business Continuity Management), ISO/IEC 20000-1 (Service Management), and ISO 14001 (Environmental Management) standards. Through this system, the organisation guarantees:

That the context of the organisation is established and maintained, identifying relevant internal and external issues, as well as the needs and expectations of stakeholders, including those related to quality, information security, continuity, services, and environmental performance.
That Integrated Management System objectives are defined in alignment with the organisation’s strategy and the commitments set out in this policy, establishing key indicators to enable their monitoring and evaluation.
That Management establishes, assigns, and communicates the roles, responsibilities, and authorities required for the effective operation of the Integrated Management System, while supporting area managers so that system requirements and commitments are embedded and applied within their respective areas of responsibility.
That the necessary resources are provided for the implementation, operation, maintenance, and continual improvement of the Integrated Management System, fostering a culture of quality, security, continuity, efficient service management, and environmental responsibility.
That risks and opportunities related to the organisation’s activities, processes, services, and objectives are continuously identified, evaluated, and managed—including environmental aspects and the risks and opportunities associated with climate change, where relevant.
That applicable compliance obligations regarding the organisation’s activities are identified and met, including legal, regulatory, contractual, and other requirements to which the organisation subscribes.
That the competence and awareness of individuals working for or on behalf of the organisation are ensured by providing the necessary training and resources to carry out their roles and responsibilities effectively.
That the processes and documented information necessary to ensure the effective operation of the Integrated Management System are established, maintained, and controlled.
That the proper management of the services defined in the service catalogue is guaranteed, fulfilling established service level agreements (SLAs) and striving for customer satisfaction.
That the necessary measures are established and maintained to ensure business continuity and resilience, taking into account risks that may affect personnel, facilities, technology, suppliers, services, and other critical resources.
That the confidentiality, integrity, and availability of information are protected by implementing appropriate security measures based on identified risks and applicable requirements.
That Management is committed to protecting the environment, including the prevention of pollution, taking into account the nature, scale, and environmental impacts of the organisation’s activities, products, and services.
That the efficient and sustainable use of resources is promoted, paying special attention to environmental aspects relevant to Data Centre operations, including energy consumption, facility efficiency, waste management, and other pertinent emissions and resources.
That risks and opportunities associated with climate change are considered—both in terms of their potential effects on the organisation’s activities and infrastructure, and the environmental impacts resulting from its own operations—adopting suitable mitigation and adaptation measures where relevant.
That environmental criteria are incorporated, where relevant, into the procurement, design, construction, maintenance, operation, and renewal of infrastructure, equipment, and services, taking into account their potential environmental impacts and a life-cycle perspective.
That the organisation collaborates with suppliers, partners, and other relevant stakeholders to encourage compliance with applicable requirements and, where appropriate, enhance process and service performance while preventing or reducing environmental impacts.
That compliance with and the effectiveness of the Integrated Management System are verified through monitoring, measurement, analysis, internal and external audits, and management reviews, establishing the necessary actions in response to deviations or non-conformities.
That non-conformities, incidents, complaints, and opportunities for improvement are managed through corresponding corrective actions, evaluating their effectiveness.
That a commitment to the continual improvement of the Integrated Management System, services, and operational performance—including environmental performance—is maintained through the establishment and monitoring of objectives, indicators, improvement actions, and periodic system reviews.

This policy serves as the framework for establishing and reviewing Integrated Management System objectives. It is maintained as documented information, communicated throughout the organisation, and made available to relevant stakeholders.

Last revision: 09/10/2026