{"id":34722,"date":"2025-05-09T11:54:12","date_gmt":"2025-05-09T09:54:12","guid":{"rendered":"https:\/\/pat.eu\/?page_id=34722"},"modified":"2026-07-31T09:45:10","modified_gmt":"2026-07-31T07:45:10","slug":"certificates","status":"publish","type":"page","link":"https:\/\/pat.eu\/en\/certificates\/","title":{"rendered":"Certificates"},"content":{"rendered":"
\n
\n\t

CORPORATE POLICY FOR QUALITY MANAGEMENT AND INFORMATION SECURITY<\/h1>\n

PAT, a company within the Zucchetti Group, has been developing automated, customer-centric<\/strong> applications and solutions for service management and support for private companies and public institutions for over 30 years. Its product portfolio has been expanded to include open-source solutions for configuring bespoke applications for IT governance, asset management and facility management<\/strong>.<\/p>\n

As part of its mission (...We invest our experience and technology in serving our clients\u2019 business processes...), PAT emphasises its commitment to pursuing excellence in the services and solutions it offers to clients; to achieve this objective, the company is constantly striving to foster expertise and innovation, with the aim of fully<\/strong> satisfying clients and fostering the professional development of its staff and resources<\/strong>.<\/p>\n

PAT\u2019s focus and commitment are therefore directed towards all aspects of corporate quality, the development of its people, information security and business continuity, recognising these as key factors in the company\u2019s success.<\/p>\n

PAT is fully aware of its role and responsibilities towards its customers and staff; consequently, for many years it has been committed to the continuous improvement of its performance, undergoing audits by third parties who have recognised and \u2018certified\u2019 the quality of its \u2018modus operandi\u2019, its commitment to regulatory compliance and its ability to fully meet customers\u2019 requests and expectations.<\/p>\n

For this reason, this Integrated Policy serves as a reliable, transparent and effective communication tool, through which PAT informs customers, employees, suppliers and partners about its activities, performance, key aspects, programmes and objectives relating to quality, information security and business continuity<\/strong>.<\/p>\n

Furthermore, PAT has been identified by the National Cybersecurity Agency as a NIS2 essential operator<\/strong>, operating in the \u2018Digital Infrastructure\u2019 sector as a provider of cloud computing services and in the \u2018ICT Service Management\u2019 sector as a provider of managed services. This designation entails the obligation to implement appropriate technical and organisational measures to manage cybersecurity risks<\/strong>, as well as to promptly notify the competent authority of any significant incidents.<\/p>\n

 <\/p>\n

SCOPE OF APPLICATION<\/h2>\n

PAT is certified to:<\/p>\n

- ISO 9001 <\/strong>for the following activities: \u201cThe design, development and implementation of software applications for Enterprise Service Management, Customer Relationship Management, IT Governance, Asset and Facility Management, supported by integrated AI components, together with the provision of professional and support services.\u201d
\n- ISO 27001<\/strong>, extended to include the ISO 27017 and ISO 27018 guidelines, for the following activities: \u201cDesign, development and implementation of software applications, including the provision of professional and support services, such as information systems management services for cloud-based solutions\u201d.<\/p>\n

 <\/p>\n

<\/h2>\n

PRINCIPLES<\/h2>\n

The principles that guide PAT in its activities are:<\/p>\n

- Meeting customers\u2019 expectations <\/strong>and needs is the cornerstone of PAT\u2019s vision;
\n- Egaging staff <\/strong>as our most valuable resource, ensuring a safe, healthy and motivating working environment that places the utmost value on each individual\u2019s contribution;
\n- Compliance with laws<\/strong>, current regulations and contractual clauses;
\n- Raising staff awareness of the Integrated Management System <\/strong>(QMS and ISMS) in order to achieve the desired results more efficiently;
\n- Data security and continuity<\/strong>: the security standards ensuring the integrity, availability and confidentiality of customer data are guaranteed by organisational measures and data centres certified to the highest standards;
\n- Cyber risk management and NIS2 compliance<\/strong>: as a NIS2 essential operator, PAT implements technical and organisational measures proportionate to the risk in order to protect its information and network systems, ensure operational resilience and fulfil its obligations to report significant incidents to ACN\u2019s CSIRT;
\n- Need-to-know principle<\/strong>: information must be accessible only to those who have a legitimate need for it and the necessary authorisation;
\n-\u00a0Qualified Suppliers<\/strong>: ensuring that suppliers provide a high-quality service;
\n- Continuous improvement<\/strong>: by evaluating past experiences and performance, projects and management systems must be continuously improved;
\n- Sustainability<\/strong>: PAT is committed to contributing to sustainable development, integrating this commitment into its business model;
\n- Ethics and integrity<\/strong>: PAT is committed to conducting its business in accordance with the highest ethical standards, not tolerating acts of corruption and operating in compliance with the laws and regulations applicable to projects carried out both in Italy and abroad;
\n- Organisational Model 231<\/strong>: through its organisational model, PAT is committed to preventing the company from incurring administrative or criminal liability for offences committed by employees or senior management in the interests of the company.<\/p>\n

 <\/p>\n

OBJECTIVES OF THE INTEGRATED MANAGEMENT SYSTEM<\/h2>\n

The objectives of the Company Policy within PAT\u2019s Integrated Management System are:<\/p>\n

- To strive for the full satisfaction of the needs<\/strong> and expectations of relevant stakeholders;
\n- To constantly monitor the internal and external environment<\/strong> in which it operates;
\n- To guarantee its customers the constant availability of personnel, processes and technologies to support the services provided, in accordance with the defined Service Level Agreements (SLAs)<\/strong>;
\n- To comply with applicable laws and regulations<\/strong>, contractual requirements, standards and company procedures;
\n- To maintain a high standard of product quality<\/strong>;
\n- To raise suppliers\u2019 awareness of quality, information security and business continuity issues, whilst always requiring compliance with the policies adopted by the Company<\/strong>;
\n- To ensure business continuity for assets and processes critical to service delivery<\/strong>, minimising the impact on the business in the event of a crisis and ensuring a rapid return to normal operations;
\n- To use the best available technology<\/strong> in achieving the company\u2019s objectives;
\n- To protect information and personal data<\/strong> from unauthorised access;
\n- To minimise the risk of loss and\/or unavailability of processed data or unauthorised disclosure<\/strong>, by planning and managing activities to ensure business continuity;
\n- To protect information assets and personal data<\/strong> within the cloud environment;
\n- Develop and maintain an Integrated Management System<\/strong> as a tool for achieving objectives, fulfilling commitments and promoting the continuous improvement of business processes;
\n- Carry out risk analyses and assess vulnerabilities and associated threats<\/strong> in order to identify and implement the necessary corrective and security measures;
\n- Periodically review the Policy, Objectives, targets and related implementation programmes, as well as the Company Management System<\/strong>, ensuring they are adequately publicised within the organisation;
\n- Carry out internal audits<\/strong> to ensure compliance with the requirements of the Integrated Management System, taking all necessary corrective actions;
\n- Comply with the obligations set out in the NIS2 Regulation<\/strong>, as a critical entity identified by ACN, by implementing and maintaining cybersecurity risk management measures proportionate to the level of risk, the size of the organisation and the potential impact of incidents;
\n- Ensure the timely notification of significant incidents to ACN<\/strong>, in accordance with the deadlines and procedures set out in the NIS Decree and the decisions of the competent authority;
\n- Ensure the security of the digital supply chain<\/strong> by verifying that suppliers and ICT service providers adopt appropriate security measures consistent with the NIS2 requirements;
\n- Strengthen the capacity to detect, manage and respond to cyber incidents<\/strong>, including through cooperation with CSIRT Italia<\/strong> and the relevant national authorities;
\n- Promote a culture of cybersecurity<\/strong> at all levels of the organisation, through structured staff training and awareness programmes on cyber risks and the obligations arising from the NIS2<\/strong> regulations;
\n- Promote the implementation, understanding and awareness of the Integrated Management System<\/strong> within the organisation;
\n- Strengthen information, education and training activities<\/strong>, involving all staff and making them aware of their individual obligations and the importance of their every action in achieving the expected results, as well as their responsibilities;
\n- Periodically monitor the effectiveness of the Integrated Management System<\/strong>, including through management review<\/p>\n

 <\/p>\n

The Management, 29 May 2026<\/em><\/p>\n<\/div>\n<\/div><\/div>

\n
\n\t<\/div>\n<\/div><\/div>
\n
\n\t

UNI EN ISO 9001:2015<\/h3>\n

\"\"<\/p>\n

 <\/p>\n

Pat has successfully passed the ISO 9001:2015 Quality Certification review, securing the issuance of the new certificate!<\/strong><\/span><\/span><\/p>\n

A certified company is better positioned to strengthen and expand relationships with existing clients and to acquire new ones\u2014both nationally and internationally\u2014thanks to an improved external image.<\/span><\/span><\/p>\n

We\u2019d like to highlight the importance of holding certifications, as they are often required to participate in specific tenders and public procurements. Certifications are a mark of quality, reliability, and competence.<\/strong><\/p>\n

The year-end audit, conducted by the certification body Certiquality<\/strong>, confirmed that the requirements<\/strong> set out by the standard are met, and that PAT has correctly implemented the necessary organizational and operational processes.<\/p>\n

The renewal of this certification once again confirms our ability to maintain a high standard of service quality<\/strong> and to consistently and effectively meet customer expectations, while achieving significant improvements in organizational efficiency and the quality of our products and services.<\/strong><\/p>\n

The ISO certification represents an important validation for both the company and our clients. It demonstrates the use of proper professional tools and the compliance of our process management systems<\/strong> with the standards defined by international technical regulations.<\/span><\/span><\/p>\n

Resources, competence, awareness, communication, and documented information are the core principles on which the certification is based.<\/strong><\/p>\n

You can view PAT\u2019s certification here<\/a>.<\/p>\n<\/div>\n<\/div><\/div><\/div>

\n
\n\t

UNI EN ISO 27011:2022<\/h3>\n

\"\"<\/p>\n

 <\/p>\n

PAT places strategic importance on the secure handling of information and recognizes the need to develop, maintain, monitor, and continuously improve an Information Security Management System<\/strong> (ISMS) in accordance with the ISO\/IEC 27001:2022<\/strong> standard, as well as guidelines ISO\/IEC 27017 and ISO\/IEC 27018<\/strong>.<\/p>\n

Achieving ISO 27001 certification<\/strong> demonstrates that PAT has implemented an ISMS compliant with international standards, ensuring the confidentiality, integrity, and availability of data, and protecting critical information<\/strong> from both internal and external threats.<\/p>\n

Obtaining ISO 27001 certification involves several key steps, including risk assessment, implementation of control measures, internal audits<\/strong>, and an external audit<\/strong> conducted by an accredited certification body.<\/p>\n

You can view PAT\u2019s certification<\/strong> issued by the certification body Certiquality here<\/a><\/p>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"

CORPORATE POLICY FOR QUALITY MANAGEMENT AND INFORMATION SECURITY PAT, a company within the Zucchetti Group, has been developing automated, customer-centric applications and solutions for service management and support for private companies and public institutions for over 30 years. Its product portfolio has been expanded to include open-source solutions for configuring bespoke applications for IT governance, […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-full-width.php","meta":[],"yoast_head":"\nCertificates - Pat<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pat.eu\/en\/certificates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Certificates - Pat\" \/>\n<meta property=\"og:description\" content=\"CORPORATE POLICY FOR QUALITY MANAGEMENT AND INFORMATION SECURITY PAT, a company within the Zucchetti Group, has been developing automated, customer-centric applications and solutions for service management and support for private companies and public institutions for over 30 years. Its product portfolio has been expanded to include open-source solutions for configuring bespoke applications for IT governance, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pat.eu\/en\/certificates\/\" \/>\n<meta property=\"og:site_name\" content=\"Pat\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/patsrl\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-31T07:45:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pat.eu\/wp-content\/uploads\/2025\/05\/CQY_9.15_EN_CMYK-150x150.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@patgroup\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pat.eu\/en\/certificates\/\",\"url\":\"https:\/\/pat.eu\/en\/certificates\/\",\"name\":\"Certificates - Pat\",\"isPartOf\":{\"@id\":\"https:\/\/pat.eu\/en\/#website\"},\"datePublished\":\"2025-05-09T09:54:12+00:00\",\"dateModified\":\"2026-07-31T07:45:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/pat.eu\/en\/certificates\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pat.eu\/en\/certificates\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pat.eu\/en\/certificates\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/pat.eu\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Certificates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/pat.eu\/en\/#website\",\"url\":\"https:\/\/pat.eu\/en\/\",\"name\":\"Pat\",\"description\":\"Infinite Solutions\",\"publisher\":{\"@id\":\"https:\/\/pat.eu\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/pat.eu\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/pat.eu\/en\/#organization\",\"name\":\"Pat Infinite Solutions\",\"url\":\"https:\/\/pat.eu\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pat.eu\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/pat.eu\/wp-content\/uploads\/2022\/06\/PATZ_b-web-01-1.png\",\"contentUrl\":\"https:\/\/pat.eu\/wp-content\/uploads\/2022\/06\/PATZ_b-web-01-1.png\",\"width\":181,\"height\":181,\"caption\":\"Pat Infinite Solutions\"},\"image\":{\"@id\":\"https:\/\/pat.eu\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/patsrl\/\",\"https:\/\/twitter.com\/patgroup\",\"https:\/\/www.linkedin.com\/company\/pat-group\",\"https:\/\/www.youtube.com\/user\/patgroup\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Certificates - Pat","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pat.eu\/en\/certificates\/","og_locale":"en_US","og_type":"article","og_title":"Certificates - Pat","og_description":"CORPORATE POLICY FOR QUALITY MANAGEMENT AND INFORMATION SECURITY PAT, a company within the Zucchetti Group, has been developing automated, customer-centric applications and solutions for service management and support for private companies and public institutions for over 30 years. Its product portfolio has been expanded to include open-source solutions for configuring bespoke applications for IT governance, […]","og_url":"https:\/\/pat.eu\/en\/certificates\/","og_site_name":"Pat","article_publisher":"https:\/\/www.facebook.com\/patsrl\/","article_modified_time":"2026-07-31T07:45:10+00:00","og_image":[{"url":"https:\/\/pat.eu\/wp-content\/uploads\/2025\/05\/CQY_9.15_EN_CMYK-150x150.jpg"}],"twitter_card":"summary_large_image","twitter_site":"@patgroup","twitter_misc":{"Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/pat.eu\/en\/certificates\/","url":"https:\/\/pat.eu\/en\/certificates\/","name":"Certificates - Pat","isPartOf":{"@id":"https:\/\/pat.eu\/en\/#website"},"datePublished":"2025-05-09T09:54:12+00:00","dateModified":"2026-07-31T07:45:10+00:00","breadcrumb":{"@id":"https:\/\/pat.eu\/en\/certificates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pat.eu\/en\/certificates\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/pat.eu\/en\/certificates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pat.eu\/en\/"},{"@type":"ListItem","position":2,"name":"Certificates"}]},{"@type":"WebSite","@id":"https:\/\/pat.eu\/en\/#website","url":"https:\/\/pat.eu\/en\/","name":"Pat","description":"Infinite Solutions","publisher":{"@id":"https:\/\/pat.eu\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pat.eu\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/pat.eu\/en\/#organization","name":"Pat Infinite Solutions","url":"https:\/\/pat.eu\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pat.eu\/en\/#\/schema\/logo\/image\/","url":"https:\/\/pat.eu\/wp-content\/uploads\/2022\/06\/PATZ_b-web-01-1.png","contentUrl":"https:\/\/pat.eu\/wp-content\/uploads\/2022\/06\/PATZ_b-web-01-1.png","width":181,"height":181,"caption":"Pat Infinite Solutions"},"image":{"@id":"https:\/\/pat.eu\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/patsrl\/","https:\/\/twitter.com\/patgroup","https:\/\/www.linkedin.com\/company\/pat-group","https:\/\/www.youtube.com\/user\/patgroup"]}]}},"_links":{"self":[{"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/pages\/34722"}],"collection":[{"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/comments?post=34722"}],"version-history":[{"count":22,"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/pages\/34722\/revisions"}],"predecessor-version":[{"id":39260,"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/pages\/34722\/revisions\/39260"}],"wp:attachment":[{"href":"https:\/\/pat.eu\/en\/wp-json\/wp\/v2\/media?parent=34722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}