Information Security Policy

"At Delta Protect, information security is the foundation on which we build our relationship with our clients. Beyond being a regulatory obligation, it represents an active and ongoing responsibility: protecting data integrity, ensuring its operational availability, and safeguarding its confidentiality are an integral part of the value we deliver.

As a digitally native organization specializing in cybersecurity services, we support companies in their compliance, maturity, and certification processes through a portfolio that includes strategic consulting (dStandard), advanced security operations management (dSOC), offensive assessments focused on business logic (dAttack), and Apollo, our platform that automates cybersecurity posture.

Our information security policy articulates the principles that guide every technological, operational, and strategic decision. Every service line, every delivery, every implementation is underpinned by the conviction that security must be proactive, measurable, and resilient. This approach is based on recognized standards such as ISO/IEC 27001:2022, which we adopt not only as a technical reference but also as a statement of principles.

Delta Protect's senior management actively leads the Information Security Management System (ISMS), integrating it across all business areas. This commitment is demonstrated by providing the necessary resources, promoting a security-focused organizational culture, and constantly monitoring compliance with established objectives. Our system is dynamic, continually improving, and adapting to threats, regulatory changes, and the real needs of our clients.

This policy is mandatory for all Delta Protect employees, as well as for suppliers, partners, and third parties who interact with our technological environments or participate in the delivery of our services. Failure to comply with this policy will be addressed in accordance with the assessment and control mechanisms defined in our ISMS.

We firmly believe that protecting information isn't just about defending it from threats. It's about creating trustworthy digital environments. It's about ensuring business continuity. It's about strengthening the reputation of those who trust us.

"Protect, comply, and evolve are the pillars that define our policy. At Delta Protect, information security is and will continue to be a strategic priority."

This policy establishes clear guidelines for protecting the confidentiality, integrity, and availability of information that both internal and external stakeholders (clients) must adhere to in order to ensure that all the services we offer meet the highest security standards, aligning our processes, services, and technology with industry best practices.

‍

Sincerely yours,

Antonio Arellano (Co-Founder & Co-CEO) & Santiago Fuentes (Co-Founder & Co-CEO)

May 2025.

‍