The IMS Policy in the company

MICROCOMP - Computersystém s r. o.

The company MICROCOMP, with its registered office in Nitra, decided for implementation of Integrated Management System as one of the main activities to fulfil its objectives, development, and growth not only of our company but also of our employees and satisfaction of our customers, including preventing negative impacts on our environment and creating suitable and safe working conditions focused on averting occupational accidents, health damage, and occupational diseases.

The main business activity of MICROCOMP - Computersystém s.r.o. is:

Development, sales, implementation, support and service of information technologies, project management, hardware, software, and communication solutions.

The IMS Policy of the company MICROCOMP – Computersystém s.r.o. is based on the following principles:

  • Implementing integrated management system in compliance with ISO 9001, ISO 14001, ISO/IEC 27001, ISO/IEC 20000-1, ISO 22301, ISO/IEC 25000, and ISO 45001.
  • Utilizing and continuously improving IMS in providing services related to the company's main business activity with the emphasis on customer needs, protection of environment, occupational health protection, information security, business continuity, and achieving required level of services provided.
  • Increasing customer' satisfaction by meeting their requirements in line with the company's objectives and required level of services provided.
  • Achieving higher competence and professionalism of its employees by setting appropriate goals for their education and personal growth.
  • Regularly monitoring the level of services provided, information system security, and company assets to prevent potential risks or eliminate them completely.
  • Changes in IMS are reviewed and approved in a controlled manner to avoid unclear specification of scope of required change and, thus, also a potential loss of availability, continuity of business, and quality of services provided.

In the quality management system:

  • Improving quality of services provided and increasing customers' satisfaction.
  • Improving processes to achieve the company's objectives and development.

In the environmental management system:

  • It is committed to plan and manage all inputs and outputs, to keep on improving these aspects to ensure environmental protection, compliance with mandatory requirements, mitigating and preventing negative environmental impacts, reducing waste production with subsequent sorting and recycling, saving energy and resources.

In the information security management system:

  • Confidentiality, accessibility and integrity for all information necessary for the company's activities
  • Compliance with the legislative and contractual requirements and the requirements of ISO/IEC 27001 standard
  • Implementing appropriate and necessary measures aimed at efficiently managing identified risks.

In the service management system:

  • Deployment of new or modified services must have clear implementation procedures.
  • Recording and information on status and type of configuration items within the services provided form the core of the system of services management.

In the software engineering management system:

  • Expanding the offer of system and software products by using the SQuaRE methodology.
  • Improving data quality and product usage by adhering to the SQuaRE quality model.
  • Applying elements of the model in providing activities and services from design and planning to implementation and integration of information systems with multi-layered architecture.

In the occupational safety and health management system:

  • Ensuring suitable conditions for work, preventing occupational accidents through adequate equipment and its subsequent regular maintenance.
  • Compliance with and fulfillment of applied legal and other requirements related to occupational safety and health.
  • Providing sufficient employees' education, with an emphasis on learning about possible aspects, risks, and threats, as well as handling emergency situations.
  • Open communication with all stakeholders and providing them with information to understand the policy, adopted objectives, and results of implementing programs in the field of OSH.

In the system business continuity management:

  • Compliance with legislative and contractual requirements, and requirements of ISO 22301 standard.
  • Continuously improving processes of the system of business continuity management.

Nitra, April 2024

Mgr. Jozef Gál, Managing Director