6. Security
The processing operator is certified according to ISO 27001:2013 and uses the ISO 27001 platform to implement a multi-level protection strategy when applying security measures at the level of the network, operating systems, databases, applications, personnel and operational processes. Compliance with regulatory and contractual requirements is regularly assessed and analyzed similarly to other infrastructure and operations of the Processing Operator, and the necessary measures are constantly taken to comply with compliance. The processing operator organized data protection using ISMS based on ISO 27001. Security documentation mainly includes program documents for information security, physical security and equipment protection, incident management, data leak handling, security incidents, etc.