> For the complete documentation index, see [llms.txt](https://docs.glesys.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.glesys.com/security/security-measures/strategy-for-security-of-network-and-information-systems.md).

# Strategy for security of network and information systems

Glesys maintains a documented security strategy and governance model to protect the confidentiality, integrity, and availability of information systems and supporting infrastructure.

### Key elements:

* **Governance and accountability:** Defined roles and responsibilities across the organization, including Security Manager, System Owners, Information Owners, and Technical Experts.
* **Policy framework:** A company-wide Security Policy establishes principles and objectives, including proactive defence, resilience, and continuous improvement.
* **Documented control system:** Policies and guidelines are version-controlled, approved, and reviewed annually within the IMS document management process.
* **System inventory & classification:** Systems are registered and managed in a centralized System Inventory with assigned ownership, criticality, and information classification.
