The organization keeps an organized, reliable and up-to-date record of operational processes and work instructions, in a clear, efficient and accessible manner for all employees, with the aid of digital tools for simple functional use.
To score “Totally agree”, the organization must:
Make available to employees easy to use storage, management and information sharing platforms (e.g. share points, Microsoft teams, drive, drop box, among others).
Ensure that key operational processes / work instructions are digitalized and available for consultation.
Question 11
The organization adopts a robust strategy to protect its intangible assets1, which is supported by intellectual property records, secrets deposits, contractual agreements in which the ownership of information shared with internal and external entities is clearly defined.
(1) Intangible assets are understood as: data, information, scientific knowledge, industrial know-how, patents and utility model, business secrets and information, acquired copyrights, software, etc
To score “Totally agree”, the organization must:
Be able to identify its intangible assets.
Annually review its policy on the management of intellectual property rights, according to the priority, the need and the type of intangible assets to be protected.
Develop an annual plan of awareness actions for employees, in order for them to be aware of the confidentiality of the activities carried out, whenever applicable.
Risk management and cyber security
Question 12
The organization has intangible asset2 protection strategies, based on cyber security technologies, with processes and controls designed to protect its systems, networks, programmes, equipment and data from external and internal attacks and intrusions, which are regularly reviewed and monitored by specialist teams.
(2) Intangible assets are understood as: data, information, scientific knowledge, industrial know-how, patent marks and utility model, business secrets and information, acquired copyrights, software, etc.
To score “Totally agree”, the organization must:
Consider cyber security as a management priority, this being an integral part of the organization's strategy.
Have mechanisms to reduce IT vulnerability
Assess the effectiveness and limitations of the mechanisms defined, at least once a year.
Have an updated incident response plan / created less than a year ago
Technological integration
Question 13
The organization owns and operates hardware and software systems capable of collecting, treating and analyzing data related to operations, autonomously and periodically, including technologies that allow communications between the various equipment.
To score “Totally agree”, the organization must:
Have systems with data processing resources that automatically process and analyze them.
Have architecture systems that allow for a total integration of the different equipment in the organization
Question 14
The organization designs and manages its information and data systems in an integrated and modular way in order to allow for efficient interoperability between systems and access to any duly accredited employee.
To score “Totally agree”, the organization must:
Ensure access and interoperability between different data sources (e.g. between production data and supplier data; between client and store data, among others) to different employees, as long as they have permission to that effect.
Have customized consultation platforms for relevant and appropriate information for different functions / objectives, reducing the need for cross / extract information from different systems (e.g. dashboards or business intelligence, among others)
We use cookies to improve the user experience, personalize content and ads, provide social media features and analyze traffic on websites. We share information with our statistical data analysis partners, who can combine it with other information that you have provided or collected by them from the use of other services. Do you consent? More information about cookies and the processing of your personal data, see ourTerms and Conditions.
