Information Security Policy

Metso provides products, solutions and services for the Minerals processing, Aggregates, and Metals refining industries.

Our vision is to be customers’ number one choice for sustainable use of the earth’s natural resources. We deliver service, reliability, innovation and results – securely.

To achieve this, we are committed to the following principles:

  • Leadership and Accountability: Metso's top management actively demonstrates leadership, accountability, and commitment to both business performance and information security.
  • Information Protection: We safeguard the confidentiality, integrity, and availability of both customer and Metso information, ensuring business continuity and resilience.
  • Compliance and Responsibility: We are committed to meeting customer information security requirements, applicable regulations and standards, and our corporate security responsibilities. Our responsibility extends to contractors, suppliers, and other third parties working at our premises or under our supervision in remote locations.
  • Governance and Continuous Improvement: Metso’s internal information security governance applies across the entire organization, ensuring alignment with our policies, directives, and compliance obligations. We establish annual security targets, measure performance, and continuously improve our work environment, processes, products, and services.
  • Risk-Based Security Management: Our cybersecurity approach is risk-based. Risks are managed through security-aware people, well-documented processes, and industry-standard security technologies.
  • Employee Awareness and Training: We are committed to developing employee competencies, ensuring adequate training, and fostering a secure work environment.
  • Culture and Engagement: We believe in an open, trusting, and high-performance culture, where everyone is empowered to contribute and continuously improve our ways of working, products, and services