About Us
We are a Peruvian company founded in 1988, specialized in BPO solutions and services for digital payments and security in the banking, telecommunications, commerce, government, among other sectors. Our team of experts is continuously engaged in research and development. In addition, we have the ISO 9001 international quality certificate in its 2015 version for all production and sales processes of BPO software and service products. We also have management systems aimed at information security and business continuity, which allow us to ensure operational efficiency, data protection and the availability of our services.

INFORMATION SECURITY GENERAL POLICY
GENERAL OBJECTIVES
- Develop products and services in accordance with the regulations and standards of the Information Security Management System (ISMS) related to the legal area, contractual and our lineaments.
- Ensure that this policy is compatible and aligned to the vision and mission of Novatronic.
- Ensure that the controls implemented are consistent with the structure of the information technology and information security risks (IS) of Novatronic.
SPECIFIC OBJECTIVES
In order to implement the Information Security Management System (ISMS), the following commitments must be considered:
- Implement the ISMS model taking into account the risk assessments, as well as the legal, technical and economic considerations of Novatronic.
- Implement Policies, Specific Policies, Procedures, Characterizations and/or Instruction of IS oriented to the good practices for the safe handling of information at the level of processes, people and technology.
- Ensure that the inventory of assets is updated periodically and implement security controls considering the risks in cyberspace.
- Assure compliance of the permanent training and awareness programs on IS matters and demands of our clients.
- Guarantee the correct compliance of periodic audits of the security controls and the good practices related to the IS that impact the business.

BUSINESS CONTINUITY POLICY
The Business Continuity Management System (BCMS) based on the ISO 22301 standard allows us to ensure the following commitments in the event of a disruptive incident:
• Establish a structured framework to ensure the achievement of business continuity objectives and define the appropriate strategy to efficiently manage the company’s recovery from disruptive events, minimizing downtime.
• Promote the company’s recovery in the face of a disruptive event and engage the entire organization in meeting its objectives through the leadership of Senior Management.
• Ensure compliance with the requirements set by the ISO/IEC 22301:2019 standard, as well as contractual commitments, legal and regulatory requirements, and meet the needs and expectations of stakeholders.
• Foster continuous improvement of the Business Continuity Management System through collaboration with all stakeholders.