We defined Information Security requirements for suppliers to work with GEA information assets.
The goal: To avoid, detect, counteract, track and minimize any security risks that have the ability to influence confidentiality, integrity and availability (CIA) of GEA Group's sensitive information. This is also necessary to ensure the security of supply is guaranteed for customers’ supply chains and availability.
- We protect all GEA information assets that are accessible to suppliers through our Information Classification and Handling regarding Confidentiality Policy. The policy helps us assess the criticality of the information assets shared with a supplier.
- The suppliers' security level has to be compliant with our customers' requirements, and applicable laws. This is integrated into the agreements and contracts with our suppliers.
- Mandatory for our suppliers is to comply to GEA’S “Information Classification and Handling Policy regarding Confidentiality” and to the applicable NDAs