IMS Policy

INTEGRATED QUALITY AND INFORMATION SECURITY POLICY

The company's management has decided to introduce and implement a quality and information security management system for the successful management of the organization as a means of continuously improving activities and processes in order to benefit all interested parties - customers, owners, employees, and suppliers. The main activity of United Registrar of Systems GmbH (URS GmbH) is conformity assessment activity according to specified requirements in the area of risk management.

Management announces the following quality and information security policy for individual areas:

Company management

• Systematic improvement of the quality of products and services provided.
• Increasing work productivity through economy in the workplace and intensive use of modern work methods and technologies.
• Continuously searching for risks and opportunities and determining measures to address these risks.
• Continuously improving the management system.
• Incorporating all entities involved in business activities, i.e., suppliers, customers, visitors, and the public, into the quality management system and actively cooperating with them.

Customer focus

• The company is dependent on its customers, therefore customer focus is the primary concern of the organization.
• The company is committed to meeting customer requirements and striving to exceed their expectations.
• The company will continuously analyse and evaluate customer satisfaction.

Employee involvement:

• The company's management motivates employees to do better work and increase performance.
• The company's management will support and utilize the abilities of employees for the benefit of the organization and all stakeholders.
• Company management will create conditions for improving collective cooperation in achieving common goals.
• Management is committed to the continuous involvement of employees in the training system.

Supplier relationships

• The company is committed to building mutually beneficial supplier relationships.
• The company will regularly evaluate and select suppliers who are able to meet its requirements.
• Mutually beneficial relationships increase the ability of the organization and its suppliers to create value for all stakeholders.

In terms of information security, the company undertakes to

• The company will maintain confidentiality, integrity, and access to information only for authorized persons.
• The company undertakes to comply with regulatory and legal requirements, including creating conditions for training employees on information security.
• We will strive to ensure that all information security breaches and suspected vulnerabilities are reported and investigated.
• We are committed to managing all external entities so that the security of internal and external information assets, including customer assets, is not compromised.
• In the context of protecting the personal data of natural persons, we undertake to protect such data in accordance with the GDPR and related legislation so that the personal data of our employees, clients, other business partners, and cooperating persons cannot be misused.