CM CONSULTING S.A.S is an organization dedicated to driving the digital transformation and technological innovation of its clients through the development of software solutions, data analytics, consulting, training, technical support, SaaS tool configuration, specialized staffing, and technical oversight in projects, with the backing of its Microsoft Partner status.

As part of the organization's purpose and context, and in support of its strategic direction, it was decided to establish, implement, and maintain an Integrated Management System in accordance with the requirements of the international standards ISO 9001:2015 and ISO/IEC 27001:2022.

With the aim of ensuring compliance with the principles of prevention, information, training, and protection; improving the institutional image that will provide a competitive advantage in the market; and providing a framework for establishing the objectives of the Integrated Management System, the organization commits to:

Commitments

1. Ensure the confidentiality, integrity, and availability of the information of the organization, clients, and other interested parties.
2. Manage the risks and opportunities that may affect service conformity and information security.
3. Comply with the legal, contractual, and other requirements applicable to the Integrated Management System.
4. Ensure the delivery of quality services that create value and strengthen customer trust.
5. Implement training programs designed to raise personnel awareness regarding the Integrated Management System.
6. Continuously improve the effectiveness of the Management System through periodic process reviews.

CM CONSULTING S.A.S provides the necessary resources to fulfill the commitments contained in this policy in order to achieve the established objectives.