Page 44 - ENAV eng_Relazione_Finanziaria_Annuale_2014

42 ENAV – 2014 Financial Statements

Plan for airports with low traffic volume

ENAV has launched a plan to rationalize service and cost levels at low
traffic volume airports that are important to ensure domestic continuity.
The plan regards the rationalization and optimization of service levels,
a specific action on personnel directly involved in the flight assistance
service, and the identification of standard technological configurations. For
the rationalization of services, the plan identifies a new “Service Method”
based on the ratio of resources employed to traffic served. Specifically,
it calls for a reduction of service hours calculated on the basis of actual
traffic volumes and the typical seasonality of some airports. This solution,
reported to the Shareholder and to the Supervising Ministry, was shared
with ENAC and presented to the airport management companies. An
initial modification of service hours took effect on 1 July 2014.

Likewise, with regard to personnel directly involved in the flight assistance
service, new contractual modalities have been identified with respect to
working hours, shift rules, and salary levels. The new management rules
are contained in the National Collective Labor Agreement that took effect
on 1 January 2015 and will be applied to newly-hired personnel working
at the airports subject to these changes. With regard to the above, the
Company has begun a hiring and training process of new personnel with
an average annual unit cost that is 30-40% lower than that for personnel
currently working at these facilities.

Legislative Decree no. 196/2003

As required by Italian law, security measures to protect personal data were
constantly monitored in 2014.

The Company planned the alignment of risk analysis for ENAV personal
data with the analysis for information security risk, as required for ENAV’s
conformity with 27001/2006 certification. Security measures and
technical/IT precautions adopted to ensure the integrity and availability of
data were checked and, as required by order of the Italian Data Protection
Authority (Garante), the work of the system administrators was assessed
one year after their appointment.

The Company monitored the provision of the privacy training course in
self-learning (e-learning) to all personnel who, as part of their assigned
duties, have to process personal data and, therefore, be specifically trained
to be appointed as data controller or data processor.

The instructions previously in the document called MOS “Manuale
Operativo di Sicurezza” (Security Manual) were added to the Rules of the
Security Management System.

This set of rules, which govern specific security matters, are addressed to
all personnel and to certain groups in the organization, and are in addition
to and supplement the contents of ENAV’s Security Policy.