Elecnor views information security as an ongoing, integral process that encompasses various elements—technical, human, material, and organizational. These components are essential for ensuring effective management of security measures. Comprehensive security measures have been implemented to mitigate potential threats and promptly address any security incidents. The goal is to prevent disruptions to the information being handled or the services provided, while also facilitating timely detection and restoration if incidents occur. To this effect, the principles of conduct are the following:

• To define, develop and put into operation the necessary technical, legal and management controls to ensure compliance with the risk levels approved for the organization at all times.
• To create a “security culture”, both internally with all the staff and externally with customers and suppliers. In particular, to promote this security culture and its implementation in the services Elecnor offers to its customers.