The Politecnico di Bari, in order to ensure effective and consistent management of information security and business continuity, in compliance with and in fulfillment of what is described by the ISO/IEC 27001:2022 Standard, defines the principles, roles, and responsibilities through the “Information Security Management System (ISMS)”.
This Policy is developed in accordance with the regulatory, institutional, and organizational context of the Politecnico di Bari and applies to the scope of the ISMS as formally defined in the document “Scope and Boundaries” adopted by the University.

In particular, this policy defines the guidelines and principles adopted by the Politecnico di Bari in order to ensure the security of information, in whatever form it may be represented and processed, whether on paper or electronic media; it is also intended to ensure adequate protection of information throughout its entire lifecycle, including the processes of creation, use, storage, transmission, and archiving through appropriate measures.

It applies to all University personnel, as well as to all external parties who, for any reason, access or process information and ICT resources of the Politecnico di Bari, including suppliers, partners, clients, and other third parties; therefore, the contents of this Policy must be communicated, known, and adopted by all internal and external parties involved, in any capacity, in the management of information and information systems of the Politecnico di Bari, including stakeholders and suppliers.

Violation of the principles of this Policy may entail consequences in relation to the responsibilities provided for by applicable law, the University’s internal regulations, and applicable contractual obligations. Any violations are managed according to the procedures defined by the ISMS and the internal procedures of the Politecnico di Bari.