ISMS Policy

RSM El Salvador LTDA. de C.V. has defined its ISMS Policy as follows:

The management and employees of RSM El Salvador LTDA. de C.V. are committed to maintaining the confidentiality, integrity, and availability of the physical and electronic information assets managed by RSM El Salvador LTDA. de C.V., to maintain consistency with its objectives and reduce information risks to acceptable levels.

To fulfill these commitments, RSM El Salvador LTDA. de C.V. maintains the continuous improvement of its Information Security Management System (ISMS) according to ISO/IEC 27001:2022.

RSM El Salvador LTDA. de C.V. has adopted Information Security objectives and performance parameters that reflect the effectiveness of the ISMS. RSM El Salvador LTDA. de C.V. RSM El Salvador LTDA. de C.V. has also established Information Security objectives and performance parameters appropriate to the services provided to its clients. RSM El Salvador LTDA. de C.V.'s security objectives and performance parameters will be monitored to demonstrate continuous improvement of the ISMS. The control objectives are designed to be supported by specific policies and procedures, documented where appropriate.

All RSM El Salvador LTDA. de C.V. employees, as well as external service providers, are expected to comply with the ISMS. Any serious non-compliance after the adoption of the ISMS will be considered a violation, leading to appropriate action.

The Information Security, Cybersecurity, and Technology Committee and senior management of RSM El Salvador LTDA. de C.V. are committed to promoting compliance with the ISMS.

This policy will be reviewed at least once a year.

ERIC KELLER
Managing Partner

_{For more information about our policies please contact: [email protected]}