Supervision of information security policies and implementation is carried out by the Board of Commissioners through the Audit Committee and the Internal Audit Unit (SPI), which conducts periodic reviews of IT systems and policies on an annual basis.
At the management level, responsibility for information security management lies under the President Director through the SPV Information Technology.
