NAVÉGALO S.A., a company providing Data Center, Telecommunications (Internet and IP telephony), Cybersecurity and Digital Marketing services, with national and international presence, headquartered in Centro Colón, San José, Costa Rica, with network nodes in Alajuelita, Berlín, Santa Ana and Raicero, has decided to maintain and continually improve an Integrated Management System (IMS) based on the following standards:
Top management commits to using the IMS as a strategic tool to:
To achieve this, NAVÉGALO's Integrated Management System is based on:
Direct quality toward the satisfaction of customers and interested parties, through the commitment of the whole organization, starting with Top Management, to meet their needs, expectations and requirements, applying a process-, risk- and opportunity-based approach.
Identify, assess and control the environmental aspects and impacts of our operations, ensuring compliance with legal and other applicable requirements, establishing pollution-prevention mechanisms and promoting continual improvement of environmental performance.
Promote the efficient use of energy and natural resources, establishing energy baselines, performance indicators and continual-improvement programmes to optimize energy consumption and reduce our carbon footprint.
Guarantee the security of NAVÉGALO's and its customers' information, through facilities with high standards of physical and logical protection, preventing security incidents and malicious software, and establishing controls, agreements and policies that apply to employees, suppliers and other relevant interested parties. A specific Information Security Policy ensures the confidentiality, integrity and availability of information, in line with the risk-management approach defined by the organization.
Ensure compliance with the PCI DSS v4 requirements that apply to the server colocation service in NAVÉGALO's Data Center, so that PCI DSS-certified customers can process and protect payment card data on secure infrastructure, with documented physical, logical and access controls.
Meet the requirements of INTE/ISO 14064-1:2019 and INTE B5:2021, ensuring the quantification, reporting and verification of greenhouse gas emissions, and promoting actions for their reduction, offsetting and neutralization toward carbon-neutral operations.
Analyse, adopt and maintain technologies that contribute to the effectiveness, efficiency and security of the IMS, prioritizing those that optimize performance, reduce risk and strengthen sustainability.
Train and raise awareness among staff, contractors and suppliers about the commitments of the IMS, fostering the organizational culture, environmental responsibility, energy efficiency, information security and customer satisfaction. Training plans are reviewed every year and aligned with the IMS objectives.
This policy is the framework for setting the objectives and targets of the IMS. It is reviewed at least once a year during the Management Review, or whenever there are significant changes in the context, risks, interested parties or regulatory requirements.
NAVÉGALO commits to communicating this policy, disseminating it and keeping it available at every level of the organization and to relevant interested parties, reinforcing the culture of security, sustainability, quality and continual improvement that characterizes the organization.
| Issued | Version | Changes from the previous version |
|---|---|---|
| 01/08/2023 | 00 | Initial version |
| 11/12/2024 | 01 | Updated to the current version of ISO 27001 |
| 20/10/2025 | 02 | PCI DSS included, wording improved and aligned with the ISO standards and the information security policy |
Prepared by the IMS Coordinator · Reviewed by the HR Manager · Approved by the General Director. The Spanish version is the official one.
Hi! 👋 How can we help?
