Alsa assumes the commitment to identify, understand, develop, implement, operate, maintain, review, and test the necessary measures to guarantee the continuity over time of Alsa's operations in the event of an incident.

To achieve this, Alsa will be guided by the following principles:

  • Protecting people: Alsa's main objective is to protect people so they feel safe. To do this, it has the latest innovations and technologies, carrying out extensive management, maintenance, and operation work in all projects and services undertaken.
  • Compliance with project and service requirements: Alsa's main objective is to comply with the agreed conditions and characteristics for carrying out projects and services, taking into account current and future needs, customers, and stakeholders, establishing -within a framework of cooperation and understanding- mutual compliance commitments with the aim of achieving solid and satisfactory relationships.
  • Legal and regulatory requirements: Alsa will analyze the organizational, project, and service requirements at a legal and regulatory level that are applicable and affect Business Continuity in each of the processes in which it is involved, to ensure compliance and the quality of the services provided, establishing security measures and alternative strategies, thereby avoiding unnecessary risks to the company.
  • Continuity Culture: Management will guarantee the promotion, involvement, and dissemination of Business Continuity capacity within the organization and the concessions included in the scope, including Business Continuity as part of the company culture. To this end, it will provide the necessary resources, ensuring that all staff are aware of and work in accordance with the established principles.
  • Risk management: Alsa Management will be responsible for the management of key risks for the operational continuity of the organization's critical processes. To this end, risk analyses based on an adapted methodology will be carried out periodically, and the resulting risks will be managed by assuming, mitigating, transferring, or eliminating them.
  • Update and review: Alsa will establish the necessary mechanisms to guarantee that the Business Continuity Plan is up to date and reflects all those changes that affect Business Continuity, with all documentation being reviewed at least annually.
  • Continuous improvement: Alsa will systematically establish improvement objectives and continuity goals, evaluate performance, and apply necessary corrections to achieve the proposed accomplishments. To this end, the participation and involvement of the entire human team will be promoted, enhancing their qualifications and attitudes through recruitment, motivation, and communication, as well as the availability of information.

Whatever the position or geographical location, all employees are responsible for the continuity over time of Alsa's operations.

Alsa considers that complying with and enforcing this Policy is the responsibility of all people participating in its activities.

Carlos Huesa

Strategy and Organization Director

25/01/2026