{"id":21583,"date":"2025-06-30T09:02:30","date_gmt":"2025-06-30T09:02:30","guid":{"rendered":"https:\/\/martinezcaballeroabogados.com\/information-security-policy\/"},"modified":"2025-06-30T10:48:19","modified_gmt":"2025-06-30T10:48:19","slug":"information-security-policy","status":"publish","type":"page","link":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/","title":{"rendered":"Information security policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"21583\" class=\"elementor elementor-21583 elementor-21481\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ef5a1c7 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ef5a1c7\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b79da07 sc_inner_width_none sc_layouts_column_icons_position_left\" data-id=\"b79da07\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f4639de sc_fly_static elementor-widget elementor-widget-spacer\" data-id=\"f4639de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7ddb79a sc_fly_static elementor-widget elementor-widget-heading\" data-id=\"7ddb79a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Information security policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-04b4a91 sc_fly_static elementor-widget elementor-widget-text-editor\" data-id=\"04b4a91\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Law Firm: M&amp;C Abogados (Apna Advocats SLP)<\/span><\/p><p><strong>Version: 1.0<\/strong><\/p><p><span style=\"font-weight: 400;\">Approval date: 06\/26\/2025<\/span><\/p><p><span style=\"font-weight: 400;\">Approved by: Diana Caballero Aguirre, CEO and Head of Information Security.<\/span><\/p><p><span style=\"font-weight: 400;\">Level of confidentiality: Internal<\/span><\/p><p><b>1. Introduction<\/b><\/p><p><span style=\"font-weight: 400;\">Information and the systems that manage it are critical assets for M&amp;C Abogados. The growing dependence on digital technologies, the processing of sensitive data and the need to maintain client confidence require the establishment of a formal security policy. This policy defines the principles, roles, responsibilities and controls necessary to protect information against internal and external threats.  <\/span><\/p><p><b>Mission and objectives<\/b><\/p><p><span style=\"font-weight: 400;\">The mission of this policy is to ensure the confidentiality, integrity, availability, authenticity and traceability of the information handled by the firm. Its main objectives are: <\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Comply with current regulations (RGPD, LOPDGDD, LSSI).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Minimize the risk of data breaches or loss.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ensure operational continuity.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Raise the team&#8217;s awareness of their role in information protection.<\/span><\/li><\/ul><p><b>3. Scope<\/b><\/p><p><span style=\"font-weight: 400;\">It applies to all systems, people, devices and processes involved in the processing of information in M&amp;C Abogados. It includes both digital and paper information, regardless of its format or support. <\/span><\/p><p><b>4. Regulatory framework<\/b><\/p><p><span style=\"font-weight: 400;\">This policy is based on:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Regulation (EU) 2016\/679 (GDPR).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Organic Law 3\/2018, on data protection and guarantee of digital rights.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Law 34\/2002 (LSSI).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Principles of ISO\/IEC 27001.<\/span><\/li><\/ul><p><b>5. Classification of information<\/b><\/p><p><span style=\"font-weight: 400;\">Dispatch information will be classified in three levels:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Confidential: records, health data, minors, criminal proceedings.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Internal use: internal communications, human resources, work documents.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public: content published on the web and social networks.<\/span><\/li><\/ul><p><b>6. Security organization<\/b><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Security Manager: Diana Caballero Aguirre (CEO).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Protection Delegate: Equal Data Protection (external).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Head of digital channels: Head of digital marketing.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IT support: external provider, under punctual order.<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">All personnel are responsible for complying with this policy and reporting incidents or weaknesses.<\/span><\/p><p><b>7. Risk management<\/b><\/p><p><span style=\"font-weight: 400;\">Although a formal audit has not been conducted, the firm is committed to:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Review risks at least once a year.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">React to incidents that affect security.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Evaluate technological or regulatory changes.<\/span><\/li><\/ul><p><b>8. Technical controls and access<\/b><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Strong passwords and two-step authentication.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Encrypted storage in Google Drive and OneDrive.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Website protection with Wordfence and Limit Login Attempts.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Controlled remote access and responsible use of personal devices.<\/span><\/li><\/ul><p><b>9. Incident Management<\/b><\/p><p><span style=\"font-weight: 400;\">Incidents shall be reported immediately to the Security Officer. Their impact shall be assessed and the AEPD shall be notified if applicable. All cases shall be documented to prevent future recurrences.  <\/span><\/p><p><b>10. Relationship with third parties<\/b><\/p><p><span style=\"font-weight: 400;\">Third parties accessing the firm&#8217;s data must sign confidentiality agreements and comply with this policy. At the end of the relationship, they must delete all information under auditable safeguards. <\/span><\/p><p><b>11. Training and awareness<\/b><\/p><p><span style=\"font-weight: 400;\">The entire team will receive annual basic training in cybersecurity, best practices and data protection. An active security culture will be promoted. <\/span><\/p><p><b>12. Updating and continuous improvement<\/b><\/p><p><span style=\"font-weight: 400;\">This policy will be reviewed annually or when relevant changes occur. All modifications will be approved by management and communicated to personnel. <\/span><\/p><p><b>13. Supplementary documentation<\/b><\/p><p><span style=\"font-weight: 400;\">This policy will be developed through:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Internal safety standards.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Safe work procedures.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Good practice guidelines for employees.<\/span><\/li><\/ul><p><b>Approved by:<\/b><\/p><p><span style=\"font-weight: 400;\">Diana Caballero Aguirre<\/span><span style=\"font-weight: 400;\"><br><\/span><span style=\"font-weight: 400;\">CEO and Head of Information Security<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a4cb518 sc_fly_static elementor-widget elementor-widget-spacer\" data-id=\"a4cb518\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Information security policy Law Firm: M&amp;C Abogados (Apna Advocats SLP) Version: 1.0 Approval date: 06\/26\/2025 Approved by: Diana Caballero Aguirre, CEO and Head of Information Security. Level of confidentiality: Internal 1. Introduction Information and the systems that manage it are critical assets for M&amp;C Abogados. The growing dependence on digital technologies, the processing of sensitive data and the need to maintain client confidence require the establishment of a formal security policy. This policy defines the principles, roles, responsibilities and controls&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_joinchat":[],"footnotes":""},"class_list":["post-21583","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Information Security Policy | M&amp;C Abogados - Martinez Caballero Abogados<\/title>\n<meta name=\"description\" content=\"Consult our information security policy: technical and organizational measures to protect your data entrusted to Mart\u00ednez &amp; Caballero Abogados.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Information Security Policy | M&amp;C Abogados - Martinez Caballero Abogados\" \/>\n<meta property=\"og:description\" content=\"Consult our information security policy: technical and organizational measures to protect your data entrusted to Mart\u00ednez &amp; Caballero Abogados.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Martinez Caballero Abogados\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/martinezcaballeroabogados\/\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-30T10:48:19+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@MC_abogados_\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/\",\"url\":\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/\",\"name\":\"Information Security Policy | M&C Abogados - Martinez Caballero Abogados\",\"isPartOf\":{\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/#website\"},\"datePublished\":\"2025-06-30T09:02:30+00:00\",\"dateModified\":\"2025-06-30T10:48:19+00:00\",\"description\":\"Consult our information security policy: technical and organizational measures to protect your data entrusted to Mart\u00ednez & Caballero Abogados.\",\"breadcrumb\":{\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/martinezcaballeroabogados.com\/en\/lawyers-in-barcelona\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Information security policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/#website\",\"url\":\"https:\/\/martinezcaballeroabogados.com\/en\/\",\"name\":\"Martinez & Caballero Abogados\",\"description\":\"Comprehensive Lawyers in Barcelona\",\"publisher\":{\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/martinezcaballeroabogados.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/#organization\",\"name\":\"Martinez & Caballero Abogados\",\"url\":\"https:\/\/martinezcaballeroabogados.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/martinezcaballeroabogados.com\/wp-content\/uploads\/2020\/02\/cropped-cropped-logo-mc-abogados-web-1-e1497812507401-1.png\",\"contentUrl\":\"https:\/\/martinezcaballeroabogados.com\/wp-content\/uploads\/2020\/02\/cropped-cropped-logo-mc-abogados-web-1-e1497812507401-1.png\",\"width\":300,\"height\":150,\"caption\":\"Martinez & Caballero Abogados\"},\"image\":{\"@id\":\"https:\/\/martinezcaballeroabogados.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/martinezcaballeroabogados\/\",\"https:\/\/x.com\/MC_abogados_\",\"https:\/\/www.instagram.com\/extranjeriabarcelonaabogados\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Information Security Policy | M&C Abogados - Martinez Caballero Abogados","description":"Consult our information security policy: technical and organizational measures to protect your data entrusted to Mart\u00ednez & Caballero Abogados.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/","og_locale":"en_US","og_type":"article","og_title":"Information Security Policy | M&C Abogados - Martinez Caballero Abogados","og_description":"Consult our information security policy: technical and organizational measures to protect your data entrusted to Mart\u00ednez & Caballero Abogados.","og_url":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/","og_site_name":"Martinez Caballero Abogados","article_publisher":"https:\/\/www.facebook.com\/martinezcaballeroabogados\/","article_modified_time":"2025-06-30T10:48:19+00:00","twitter_card":"summary_large_image","twitter_site":"@MC_abogados_","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/","url":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/","name":"Information Security Policy | M&C Abogados - Martinez Caballero Abogados","isPartOf":{"@id":"https:\/\/martinezcaballeroabogados.com\/en\/#website"},"datePublished":"2025-06-30T09:02:30+00:00","dateModified":"2025-06-30T10:48:19+00:00","description":"Consult our information security policy: technical and organizational measures to protect your data entrusted to Mart\u00ednez & Caballero Abogados.","breadcrumb":{"@id":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/martinezcaballeroabogados.com\/en\/information-security-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/martinezcaballeroabogados.com\/en\/lawyers-in-barcelona\/"},{"@type":"ListItem","position":2,"name":"Information security policy"}]},{"@type":"WebSite","@id":"https:\/\/martinezcaballeroabogados.com\/en\/#website","url":"https:\/\/martinezcaballeroabogados.com\/en\/","name":"Martinez & Caballero Abogados","description":"Comprehensive Lawyers in Barcelona","publisher":{"@id":"https:\/\/martinezcaballeroabogados.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/martinezcaballeroabogados.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/martinezcaballeroabogados.com\/en\/#organization","name":"Martinez & Caballero Abogados","url":"https:\/\/martinezcaballeroabogados.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/martinezcaballeroabogados.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/martinezcaballeroabogados.com\/wp-content\/uploads\/2020\/02\/cropped-cropped-logo-mc-abogados-web-1-e1497812507401-1.png","contentUrl":"https:\/\/martinezcaballeroabogados.com\/wp-content\/uploads\/2020\/02\/cropped-cropped-logo-mc-abogados-web-1-e1497812507401-1.png","width":300,"height":150,"caption":"Martinez & Caballero Abogados"},"image":{"@id":"https:\/\/martinezcaballeroabogados.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/martinezcaballeroabogados\/","https:\/\/x.com\/MC_abogados_","https:\/\/www.instagram.com\/extranjeriabarcelonaabogados\/"]}]}},"_links":{"self":[{"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/pages\/21583","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/comments?post=21583"}],"version-history":[{"count":1,"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/pages\/21583\/revisions"}],"predecessor-version":[{"id":21584,"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/pages\/21583\/revisions\/21584"}],"wp:attachment":[{"href":"https:\/\/martinezcaballeroabogados.com\/en\/wp-json\/wp\/v2\/media?parent=21583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}