The Electricity and Natural Gas Market Operator "OPCOM" SA focuses all its efforts and resources on ensuring the quality of the activities related to: the organization and administration of centralized electricity markets, in a national, regional and European framework, namely the intraday market, the day-ahead market, the bilateral contracts market with specific trading modalities, the centralized market for universal service, the centralized market with continuous double negotiation of bilateral contracts, the centralized market intended for the award of contracts for long delivery periods, the electricity market for large final customers and the centralized market for electricity from renewable sources supported by green certificates; the organization and administration of the green certificate market through the anonymous centralized spot and forward green certificate markets and through the bilateral green certificate contracts market and the administration of the Green Certificate Register; the organization and administration of centralized natural gas markets with specific trading modalities; the fulfillment of the function of settlement operator for centralized electricity and natural gas markets in which it is a counterparty; exercising the role of CfD counterparty within the support mechanism through contracts for difference for low-carbon technologies established by GD no. 318/2024; organizing and managing the surveillance activity of the administered markets; organizing and managing the reporting activity to ACER (REMIT).
OPCOM SA has established, as an integral part of the company's overall activity, the maintenance of the Quality Management System in operation at the designed and updated parameters.
The principles underlying the company's quality policy are the following:
- Compliance with primary and secondary legislation as well as the requirements of the competent authorities;
- Continuous improvement and diversification of the services offered;
- Definition and updating of responsibilities within the Quality Management System;
- Adaptation and increase of the level of staff training to perform tasks and duties in accordance with the responsibilities defined by the regulations in force;
- Analysis and implementation of opportunities for improving the activity resulting from internal and external audits and other quality assurance checks;
- Permanent evaluation of the results of the operation of the Quality Management System and the compliance of the quality policy.
The Chief Executive Officer of OPCOM SA assumes full responsibility for the adoption of the Quality Management System and its continuous improvement.
All OPCOM SA personnel are required to know and respect the responsibilities assigned in the field of quality and to implement the Quality Management System in the activities they carry out.
The OPCOM SA Quality Policy was approved by the Chief Executive Officer on January 22, 2026.
The Information Security Policy of OPCOM S.A. is to continuously aim for the fulfillment of its responsibilities in the electricity and gas markets at national and European level, while ensuring information security at the highest standards by implementing and operating an Information Security Management System in full compliance with the international standard ISO 27001:2013, aiming at continuous improvement and certification of the organization.
OPCOM S.A. is aware that the attributes of Information Security Management - confidentiality, integrity, and availability - are integral parts of managerial functions. OPCOM S.A.’s top management treats these attributes as main and fundamental responsibilities for good organizational practices regarding the adoption of appropriate security measures, harmonized with the requirements of the international standard ISO/IEC 27001:2013.
Furthermore, OPCOM S.A., as an operator of essential services, implements the necessary measures to comply with the provisions of Law no. 362/2018 on ensuring a high common level of security of networks and information systems law which transposes Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 on measures for a high common level of security of networks and information systems in the Union (NIS Directive).
OPCOM S.A. acts for:
- Conformity with primary and secondary legislation as well as the requirements of the competent authorities.
- Organizing, configuring, and fulfilling the functions assigned to OPCOM within the European common markets and maintaining the necessary infrastructure needed to supply coupling services to customers, including the related security information requirements.
- Continuous improvement of information security in the context of services offered to participants in managed markets.
- Ensuring a high-performance work environment with a high level of information security in the context of increasing remote activity volume in order to reduce personal health risks in epidemic/pandemic situations.
- Analysis and implementation of opportunities for continuous improvement, including the application of risk evaluation and treatment strategies, efficiently using managerial resources for the optimal fulfillment of the information security requirements.
- Establishing and communicating security objectives and the performance obtained in achieving them within the organization.
- Monitoring and maintaining an Information Security Management System, which provides clearly defined directions, guidance, and responsibilities in the field of information security in relation to its own personnel, customers, suppliers, and stakeholders who come into contact with the organization.
- Adopting a proactive attitude in making future business decisions, including analyzing the results of the functioning of the Information Security Management System and its continuous improvement.
- Training and awareness of its own personnel according to the needs and responsibilities arising from the Information Security Management System.
The responsibility for supporting and complying with this policy belongs to the entire organization, under the guidance and assistance of top management, which encourages the commitment of all personnel in addressing information security as a part of their professional skills and organizational culture.
In this sense, the management of OPCOM S.A. appointed an information security management representative, as well and a team responsible for NIS (Network and Information Security), whom, together with the work team for information security and the Security Incident Response Team, coordinate the activities of the organization regarding information security and represents OPCOM S.A. in its relationship with consultants, the certification body and interest groups or other specialized forums or professional associations in the field of information security.
OPCOM SA’s Information Security Policy was approved by the Chief Executive Officer on October 20, 2025.
Quality Management System and
|
 |
 |