SIT Spain, a benchmark in specialized logistics, has adapted its processes to the challenge of moving technology and information with the highest security standards. Its commitment to logistics innovation and comprehensive protection makes every move an armored operation. This is explained by itsCEO, José Luis Tabuenca García.

How does SIT Spain define its role in cybersecurity by moving IT devices for companies, administrations and individuals?

SIT Spain takes an active role as a guarantor of logistics cybersecurity, applying protocols equivalent to international supply chain security standards (TAPA FSR 2023). SIT's role is focused on minimizing the risk of unauthorized access, loss, manipulation or theft of information, ensuring that each transfer is executed under principles of confidentiality, integrity and traceability. Its role is defined around three main axes:

What policies and protocols does the company apply to ensure the confidentiality and protection of information during transportation and storage?

Confidentiality of information: SIT Spain establishes procedures that ensure that only authorized and accredited personnel have access to the devices. The packaging is made with numbered and controlled sealing systems, preventing tampering. At no time does the company access the contents of the equipment, respecting the privacy of the data and complying with the principles of confidentiality.

What physical and technological measures do you use to ensure the integrity of the equipment and chain of custody at each stage of the transfer?

• Adapted vehicles with electronic locking, alarm systems and real-time GPS location.
• Double verification protocols for loading and unloading, with photographic record and digital signature of the client.
• High security warehouses (grade 3) with access control, perimeter cameras, motion sensors and 24/7 remote monitoring.
• Intelligent sealing systems (RFID/QR) that allow tracking the status and location of each unit.
• Operational safety checklists, signed at each stage by the responsible personnel, ensuring traceability.

What training and controls do personnel involved in transfers receive to ensure they meet cybersecurity standards?

• Specific training in TAPA FSR 2023 and supply chain security protocols.
• Cybersecurity training applied to logistics, including hardware and storage device handling risks.
• Training in data protection (RGPD) and contractual confidentiality.
• Periodic internal controls and audits, which evaluate compliance with procedures, simulations of incidents and reviews of best practices.
• Internal disciplinary protocols in case of non-compliance with safety standards.

What innovations or technologies are you incorporating to strengthen security?

• Implementation of real-time digital tracking platforms with access for clients.
• Use of electronic seals with opening sensors that notify any tampering attempt.
• Digitized document management systems (SparkSpace and corporate OneDrive) to ensure that each transfer is recorded and traceable.
• Collaboration with logistics cybersecurity solution providers, integrating data protection standards with physical operations.
• Exploration of blockchain technologies for chain of custody in pilot projects.

How do you communicate to your clients the security and confidentiality guarantees that SIT offers in this type of services?

• Inclusion of guarantees in commercial proposals and contracts, specifying applicable security protocols and certifications.
• Delivery of chain of custody reports at the end of the service, with complete traceability of the transfer.
• Active communication of TAPA FSR 2023 certification and other reference standards (ISO 9001, ISO 14001, ISO 27001) in support of best practices.
• Immediate incident reporting protocols with action plans and transparent communication.
• Publication on the web and corporate material of the security and confidentiality standards applied to institutional, corporate and individual clients.