Technology development policy

Exceltic's Management, based on its Quality and Safety Policy, which is consistent with its Values, is committed to continuous growth and improvement in its Services and Processes. Technological Development Processes..

Objective:

Establish a development scenario by adopting best practices in technology development and project management and achieve the construction of secure and quality software products in a systematic and coherent manner.

To achieve these objectives and to be consistent with the principles stated herein, Exceltic's management is committed to reviewing and evaluating its software life cycle processes to determine our Software Process Improvement Capability through ISO/IEC 33000 - ISO/IEC 12207:2017 as a model for the improvement, evaluation and assessment of processes for the development and maintenance of information systems and software products.

Principles of Technology Development in EXCELTIC:

• Generate safe and quality products in a predictable manner
• To achieve customer satisfaction by meeting deadlines, safety and quality requirements, working closely with the customer both in the definition and development of the project, throughout the entire life cycle.
• The definition of new processes or tools will lead to the institutionalisation, securitisation and standardisation of the improvements developed throughout Exceltic.
• Communication and collaboration of work teams (internal and inter-departmental) will be promoted, keeping centralised records of the work done and promoting dissemination and training in new technologies. 
• The entire development cycle must conform to Exceltic's Information Security Policy.
• Access to applications and data, as well as logging of modifications and access, must be controlled.
• Establish and maintain control over all inputs and outputs of the developed software.
• A testing phase should be carried out to cover the vulnerabilities known to the industry, by performing tests that address the main existing vulnerabilities.

Responsibilities

• The management team is responsible for ensuring that compliance with and implementation of best practices, as well as continuous improvement of best practices, is properly managed throughout the organisation.
• The Technical Director is responsible for ensuring that the people working under his/her control apply the Policy and standards established within Exceltic, and are involved and committed to their evolution and improvement.
• The Quality and Security Manager advises the management and technical team, providing specialised methodological support and ensuring that reports on the status of technology projects are available.
• Each member of the Technical Team has the responsibility to know and maintain compliance with the Policies and standards established in the Technological Development guaranteeing the Quality and Safety of their work products. In addition, they must be aware of and involved in the achievement of the project objectives.

The Technology Development policy will remain available on the corporate website and on the organisation's intranet and will be updated regularly.

In Madrid, 30 September 2024

Mr. José Antonio Suárez – D. Eduardo Requejo

Directorate-General for EXCELTIC