15/01/2026
Sando has achieved the certification of its Information Security Management System (ISMS), according to the ISO/IEC 27001:2023 standard. The AENOR entity has accredited that the organisation has a solid, effective system aimed at protecting information, guaranteeing the confidentiality, integrity and availability of data, as well as the correct management of the associated risks.
The group of companies has obtained ISO 27001 certification after successfully passing two audit phases. This milestone is a key step in the consolidation of a management model aligned with international standards in the field of information security.
In an increasingly digital and demanding environment, Information Security Management Systems (ISMS) represent the most reliable option for minimizing and adopting the most effective controls and procedures.
Certification through ISO 27001 helps to promote system protection activities and generates confidence in the management of information vis-à-vis third parties. This accreditation reflects Sando’s strategic commitment to information security as a fundamental pillar for the protection of information assets and compliance with regulatory and contractual requirements.
The process of implementing the Information Security Management System implies the effective assumption of this policy throughout the organization. The certification has been achieved thanks to the collaboration, awareness and commitment of all the professionals who make up the company, in line with the corporate culture of safety and shared responsibility. This aspect has been particularly highlighted by AENOR in the final audit report.