Information Security Policy

RSM Società di Revisione e Organizzazione Contabile S.p.A. recognises information security as a fundamental element in protecting its clients, professionals, employees, contractors, suppliers and business partners. The Firm is committed to protecting information and information assets by ensuring:

  • confidentiality of information; • integrity of data and processes; • availability of information and services;
  • compliance with applicable legal, regulatory and contractual requirements;
  • continual improvement of the Information Security Management System (ISMS).

To achieve these objectives, RSM: 

  • maintains an Information Security Management System aligned with ISO/IEC 27001:2022;
  • identifies, assesses and treats information security risks;
  • promotes awareness and training across the organisation;
  • establishes objectives and metrics to monitor ISMS performance;
  • applies appropriate security requirements to suppliers, contractors and third parties;
  • periodically reviews the ISMS to ensure its effectiveness, adequacy and alignment with business objectives. 

All employees, contractors and third parties acting on behalf of RSM are expected to comply with the principles and requirements of the Information Security Management System. Top Management supports the ISMS and promotes its continual improvement as a key element in protecting information and ensuring the quality of services provided.