Página servicio de Babel Sistemas de Información

We assist you in implementing an Information Security Management System (ISMS) based on ISO 27001, from establishment up to certification, and including a subsequent permanent monitoring and follow-up service that ensures ongoing system maintenance.

We offer our customers a complete diagnostic, advisory and consultancy service for adaptation and compliance with the National Security Framework (ENS - Royal Decree 3/2010, 8 January, amended by Royal Decree 951/2105, 23 October), which aims to establish the security policy for the use of electronic media and adheres to basic principles for the adequate protection of information.

All companies and public bodies that handle personal information are obliged to adopt the requirements of the General Data Protection Regulation (GDPR) - EU 679/2016 (in application since 25 May 2018) and the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, of 5 December 2018, approved by the Spanish Congress of Deputies.

We offer you a complete range of services aimed at covering the entire life cycle of the processing of personal data, i.e., from the phase of analysis of the current situation and adaptation plan to maintenance, including support for implementation and subsequent reviews.

PCI DSS (Payment Card Industry Data Security Standard) is a security standard published by the PCI Security Standard Council and defines the requirements for the protection of payment card data and the technological infrastructure that stores, processes or transports it. It therefore applies to companies that process, transmit or store payment card data (banks, e-commerce, merchants and processors, among others).

The European Union's Payment Services Directive 2 (PSD2) legislation, active since 13 January 2018, provides a legal framework for digital payments made in Europe and obliges financial institutions operating a bank payment account to transfer its data to third parties expressly authorised by the account holder.

Babel, as a company specialising in security services for the financial sector, offers you expert assistance and advice to ensure compliance with PCI DSS and PSD2, from the initial diagnosis phase (GAP Analysis) and implementation plan, to the certification support service, including support for the execution of the plan's actions and ongoing support.

The main objective of the Critical Infrastructure Protection Act (LPIC, 8/2011) is to improve the protection of those infrastructures that are considered critical for the country.

The Royal Decree-Law on the Security of Networks and Information Systems (LNIS, 9/2018), transposes the European Directive NIS 2016/1148 (Security of Networks and Information Systems) into Spanish law, with the main objective of increasing protection against attacks and vulnerabilities in networks and information systems throughout the EU. It affects both operators of essential services and digital service providers.

Babel offers expert assistance for compliance with both laws, covering the entire project lifecycle, from the initial diagnosis phase to the design of the implementation roadmap, support for the action plan and subsequent maintenance.  

We help organisations to undertake a risk analysis that systematically and homogeneously quantifies the real risks to which information systems are subjected in the face of different threats, and which enables actions to reinforce organisational, legal, physical and technical security measures to mitigate these risks to be identified.

A Security Master Plan is the range of these actions, scheduled and budgeted to mitigate the security risks identified.

Organisations today depend on IT infrastructures to carry out their activities and develop their business. In the event of an incident that renders these infrastructures unusable (fire, flood, sabotage, vandalism, earthquake, etc.), the continuity of the infrastructure could be seriously affected and may even be irrecoverable within an acceptable period of time.

To be prepared for any disruptive incident, Babel offers a range of complementary services covering Disaster Recovery Planning (DRP), with the measures to be taken to keep a business up and running in the event of a disaster and the actions to be taken for restoration.

In addition, the business impact analysis (BIA) identifies the criticality and sensitivity of an interruption of the different business processes and, consequently, determines the recovery times associated with each process and the recovery strategies to guarantee them.

We offer you a consultancy service for the implementation of a Business Continuity Management System (BCMS) based on the ISO 22301 standard. From its establishment until the moment of obtaining certification, this service is completed with permanent monitoring and follow-up in order to ensure the continuous maintenance of the system.  

We offer a specialised Technical Office to provide advice for those customers who are affected by regulatory requirements, IT standards or information security and do not have sufficient internal resources to be able to address compliance or require external expertise, These services are generally attached to the organisation’s CISO (Chief Information Security Officer) or DPO (Data Protection Officer), in order that they can be supported by an expert team of security technicians and consultants who will contribute to compliance with the requirements.

In addition, if you already have a roadmap or action plan with security projects in any domain (technical, organisational, physical, legal), we provide you with a Project Management Office (PMO) in order to manage, coordinate and ensure the timely implementation of these projects.

We must improve the security of our organisation by starting with the weakest link in the chain: people. It is vital to carry out awareness-raising initiatives with the aim of training, disseminating information and creating awareness amongst all the organisation's employees in relation to the importance of information security and how to apply good practices to their daily activities.

We support our customers with a wide range of activities aimed at improving employee motivation, intuition and safety training.