Information Security Policy

The main aim of TS EN ISO 27001:2013 Information Security Management System is to demonstrate that information security management is provided within the human, infrastructure, software, hardware, organization information, third person information and financial resources, to ensure risk management, to measure the performance information security process and to regulate relations with the third person’s in information security related matter.

For this purpose, the aim of the ISMS Policy is:

• Managing information assets, identifying security values, needs and risks of assets, developing and implementing security risk controls

• To define the framework within which information assets, values, security needs, weaknesses, threats to assets, methods for detecting the frequency of threats will be determined

• Define a framework for assessing threats to the effects of privacy, integrity, and accessibility on assets.

• To establish the working principles for the processing of risks.

• Keeping track of the risks by observing the technological expectations in the context of the service scope.

• To ensure the information security requirements arising from the internal and external stakeholders' responsibility for the internal and external stakeholders, in compliance with the obligations arising from agreements, in compliance with national and international regulations, legal and related legislative requirements.

• To reduce the impact of information security threats to service continuity and to contribute to continuity

• Ability to quickly intervene in the events of information security that may occur and to have the competence to minimize the impact of the event

• Protecting and improving the level of information security with a cost-effective control infrastructure over time.

• To improve the reputation of the company, to protect from information security-based adverse effects

UMUT AYDIN