54 PRT GROUP /SUSTAINABILITY REPORT 2021 1. CONFIDENTIALITY 2. INTEGRITY 3. AVAILABILITY Offering confidentiality means ensuring that data and resources are preserved from possible use or access by unauthorized subjects. Confidentiality must be guaranteed during the whole life of data: from storage to use or transit along the connection network. Integrity is the ability to maintain the truthfulness of data and resources, and guarantee that they are not modified nor canceled, except by authorized subjects. Availability refers to the possibility for authorized subjects to access the resources they need for a fixed time and in a continuous way. This allows to prevent service interruptions and ensures that infrastructures are ready to provide resources in a correct way when requested. The introduction of the GDPR - the regulation that reshaped organizational features in terms of data protection - combined with the need for remote working, pushed PRT Group to invest in infrastructures, protection systems and remote access with SSL protocols. The latter are implemented through a cryptographic key negotiated between sender and addressee, so that transmitted data are encrypted and no one else is be able to intercept them. Since 2015, the company obtained the ISO/IEC 27001:2013 certification. It is an international standard that defines requirements to plan, implement, operate, monitor, re-evaluate, maintain and improve the management system for information security with companies. The valid certificate proves that the company complies with the norm in the following fields: • Management of IT systems linked to document composition14; • Management of printing spool15 for printing; • Envelope packaging and mailing services for transnational and/or commercial communication; • Dematerialized management of documents and digital storage in compliance with norms. Staff in the IT department is periodically trained, especially on ISO/IEC 27001:2013 certification. The short-term goal is to extend it to all PRT’s employees using IT tools in order to make them aware of the correct use of instruments and the risks linked to inappropriate behaviors that may cause damages to the security and integrity of corporate systems. . 14 The process of creating one or more documents following instructions by customers, such as: settings, font type and special customization features. 15 Data flowwaiting to be sorted to a device that should process/print them.
RkJQdWJsaXNoZXIy NDUyNTU=