Information Security Policy

Durrës Port Authority (DPA)
As the institution managing the largest port in the Republic of Albania, the Durrës Port Authority is committed to the highest standards of information security and protection.

As a critical national infrastructure, we ensure the confidentiality, integrity, availability, and control of information for all stakeholders — employees, clients, and port users.

Our Information Security Management System is implemented in compliance with the international standard ISO 27001, ensuring full protection and transparency in the processing of data.


Our Commitment

  • Information protection – We ensure that all data is protected against unauthorised access, use, or modification.
  • Legal compliance and international standards – We apply national legislation and international guidelines for information security and cybersecurity.
  • Institutional cooperation – We work closely with government agencies to ensure the highest levels of critical infrastructure protection.
  • Risk management – We identify, assess, and address information-related risks through clear action plans.
  • Continuous improvement – We set measurable objectives and conduct periodic audits and tests to strengthen system security.
  • Awareness and training – We provide training and promote a culture of responsibility regarding information security for our employees, contractors, and partners.
  • Transparency and communication – We publish and communicate this policy across all working environments and on our official website, encouraging the reporting of any actual or suspected breach.
  • Dedicated resources – We ensure the necessary human and technical resources for the effective implementation of this policy.

Scope of Application

This policy is mandatory for all employees of the Durrës Port Authority, as well as for contractors, subcontractors, and stakeholders who have access to information administered by the DPA.

It applies to all locations and information assets of the institution and is supported by internal procedures and documents covering every aspect of information security.


Durrës Port Authority – For a safe, transparent, and protected port at every level of information.