Embedded Files
Our IMS Applicable Standards and Frameworks
Our IMS Applicable Standards and Frameworks
Devoteam Portugal Integrated Management System (IMS) covers the following normative references:
Devoteam Portugal Integrated Management System (IMS) covers the following normative references:
NP EN ISO 9001:2015 - Quality Management System
NP EN ISO/IEC 27001:2022 - Information Security System
ISO/IEC 20000-1:2018 - Service Management System
TISAX Assessment Level 3 (AL3) requirements relating to Information Security, Data Protection, and Prototype Protection
IMS Scope
IMS Scope
Quality Management System Scope (NP EN ISO 9001:2015)
Digital Transformation and Technology Consulting Services and applies to all Devoteam Portugal sites.
Information Security Management System Scope (NP EN ISO/IEC 27001:2022)
Digital Transformation and Technology Consulting Services and applies to all Devoteam Portugal sites.
Service Management System Scope (ISO/IEC 20000-1:2018)
The Service Management System covers the provision and management of Managed Services included in the approved Service Catalogue, delivered to internal and external Customers, across all Devoteam Portugal sites.
The services within scope are:
Cloud Managed Services (CMS)
Application Managed Services (AMS)
Helpdesk Services (HLP)
Identity & Access Management (IAM)
Technical Advisory & Review (TAR)
Observability & Reliability Engineering (ORE)
TISAX Assessment Level 3 - Information Security, Data Protection, and Prototype Protection Scope
Applicable to all Devoteam Portugal services and applies to all Devoteam Portugal sites.
Certifications & Assessments
Certifications & Assessments
BOLDINT, S.A., a Devoteam Portugal entity, is certified in:
NP EN ISO 9001:2015 - Quality Management System - Requirements
NP EN ISO/IEC 27001:2022 - Information Security System - Requirements and Guidelines
BOLDINT, S.A., a Devoteam Portugal entity, has successfully completed:
TISAX Assessment Level 3 and holds the corresponding TISAX labels covering Information Security and Data Protection.
Certifications & Assessments: Under Implementation
Certifications & Assessments: Under Implementation
Service Management System (ISO/IEC 20000-1:2018)
TISAX Assessment Level 3 - label covering Prototype Protection
IMS Objectives
IMS Objectives
Devoteam Portugal’s Integrated Management System (IMS) is designed to support Quality, Information Security, Service Management, Data Protection, and organisational resilience through a unified and structured approach.
By aligning with the requirements of ISO 9001, ISO/IEC 27001 and ISO/IEC 20000-1, the applicable TISAX Level 3 assessment requirements, and relevant data protection, legal, regulatory and contractual obligations, the IMS is committed to achieving the following key objectives:
Enhancing Quality Management
Through our ISO 9001-certified Quality Management System, Devoteam Portugal aims to consistently meet its Clients’ requirements, monitor and enhance processes, continuously improving the quality of our services, and boost overall satisfaction.
Through our ISO 9001-certified Quality Management System, Devoteam Portugal aims to consistently meet its Clients’ requirements, monitor and enhance processes, continuously improving the quality of our services, and boost overall satisfaction.
Elevating Information Security
Through our ISO/IEC 27001-certified Information Security Management System and TISAX AL3 Information Security requirements, Devoteam Portugal maintains a risk-based approach to protecting the confidentiality, integrity and availability of information. We continuously assess risks, strengthen security controls and adapt our measures to evolving threats, technologies and business requirements. This commitment is designed to build trust with clients and stakeholders by demonstrating a strong dedication to protecting their information.
Through our ISO/IEC 27001-certified Information Security Management System and TISAX AL3 Information Security requirements, Devoteam Portugal maintains a risk-based approach to protecting the confidentiality, integrity and availability of information. We continuously assess risks, strengthen security controls and adapt our measures to evolving threats, technologies and business requirements. This commitment is designed to build trust with clients and stakeholders by demonstrating a strong dedication to protecting their information.
Driving IMS Integration & Performance
Our IMS brings together Quality, Information Security, Service Management, Data Protection and applicable TISAX requirements within a unified governance framework. Devoteam Portugal continuously works to strengthen process integration, reduce unnecessary complexity, improve performance and ensure that the IMS effectively supports the organisation's strategic objectives.
Our IMS brings together Quality, Information Security, Service Management, Data Protection and applicable TISAX requirements within a unified governance framework. Devoteam Portugal continuously works to strengthen process integration, reduce unnecessary complexity, improve performance and ensure that the IMS effectively supports the organisation's strategic objectives.
Promoting Continual Improvement
Continual improvement is a core principle of our IMS. Through monitoring, audits, risk management, corrective actions and management reviews, Devoteam Portugal continually improves the effectiveness and maturity of its management systems and processes, while adapting to evolving technologies, customer expectations, business needs and regulatory requirements.
Continual improvement is a core principle of our IMS. Through monitoring, audits, risk management, corrective actions and management reviews, Devoteam Portugal continually improves the effectiveness and maturity of its management systems and processes, while adapting to evolving technologies, customer expectations, business needs and regulatory requirements.
Ensuring Data Protection
Building on our TISAX AL3 Data Protection assessment and data protection framework, Devoteam Portugal is committed to protecting personal data and ensuring compliance with applicable data protection laws and regulations, including the GDPR and relevant industry-specific requirements. We promote a privacy-first approach, ensuring that data protection principles are embedded into our operations.
Building on our TISAX AL3 Data Protection assessment and data protection framework, Devoteam Portugal is committed to protecting personal data and ensuring compliance with applicable data protection laws and regulations, including the GDPR and relevant industry-specific requirements. We promote a privacy-first approach, ensuring that data protection principles are embedded into our operations.
Improving Service Management
Devoteam Portugal is implementing a Service Management System in accordance with ISO/IEC 20000-1, with the objective of achieving certification. This strengthens the governance of our Managed Services by promoting consistent service delivery, effective performance monitoring, fulfilment of agreed service requirements, structured service management practices and continual improvement.
Devoteam Portugal is implementing a Service Management System in accordance with ISO/IEC 20000-1, with the objective of achieving certification. This strengthens the governance of our Managed Services by promoting consistent service delivery, effective performance monitoring, fulfilment of agreed service requirements, structured service management practices and continual improvement.
Advancing Prototype Protection
Building on our existing TISAX AL3 Information Security and Data Protection framework, Devoteam Portugal is implementing the requirements applicable to TISAX Prototype Protection. Our objective is to strengthen the organisational, physical and technical measures required to protect prototypes and prototype-related information throughout their lifecycle and successfully complete the corresponding TISAX assessment.
Building on our existing TISAX AL3 Information Security and Data Protection framework, Devoteam Portugal is implementing the requirements applicable to TISAX Prototype Protection. Our objective is to strengthen the organisational, physical and technical measures required to protect prototypes and prototype-related information throughout their lifecycle and successfully complete the corresponding TISAX assessment.
By achieving these goals, Devoteam Portugal strengthens its operational excellence, competitive advantage, and market reputation.
Integrated Management System (IMS) Processes Map
Integrated Management System (IMS) Processes Map
The following IMS Process Map provides a clear overview of how Devoteam Portugal’s Integrated Management System (IMS) is structured and how its processes interact.
Understanding these interactions helps demonstrate how the IMS supports our strategic objectives and contributes to consistent quality, effective governance, compliance, risk management, and continual improvement.
The IMS Process Map groups our processes into three main categories - Business, Support and Operations -, reflecting their role within the management system and the way they contribute to the achievement of organisational objectives.
By familiarising yourself with the IMS Process Map, you can better understand how our processes are organised, interconnected, and contribute to Devoteam Portugal’s overall performance and to the effectiveness and continual improvement of the IMS.
For further information about the Integrated Management System and its processes, please refer to our IMS Manual.
BUSINESS PROCESSES [+]
Define the scope, policies, and objectives of our IMS, setting the direction for our management system and ensuring alignment with our organisational goals.
SUPPORT PROCESSES [+]
These are crucial for maintaining effective resource management, ensuring smooth business operations, and meeting compliance requirements with international standards.
OPERATIONS PROCESSES [+]
Outline the specific activities needed to deliver our products and services to stakeholders effectively, focusing on execution and performance.
Service Management System (SMS) Processes Map
Service Management System (SMS) Processes Map
The following SMS Processes Map provides an overview of how the Managed Services processes are structured and interact within Devoteam Portugal’s Service Management System (SMS).
The processes are organised into three main areas:
Service Strategy
Service Management
Service Planning and Delivery
Together, these processes support the planning, management, delivery, monitoring and continual improvement of Managed Services.
The map also illustrates the key interactions and dependencies between the processes that support the operation of the SMS.
For further information about the Service Management System and its processes, please refer to our IMS Manual and PT-PROC4.2 - Managed Services Management.
This page contains important compliance-related information for Devoteam Portugal Employees and Contractors. All content is intended for internal use and must be adhered to in accordance with Devoteam's corporate standards and policies.
Last updated: 04/09/2026Authors: Rute Reizinho, Compliance Director & DPO and Joana Abreu, IMS Specialist at Devoteam Portugal
Last updated: 04/09/2026Authors: Rute Reizinho, Compliance Director & DPO and Joana Abreu, IMS Specialist at Devoteam Portugal
Report abuse