Information Security Policy

In order to manage risks by identifying all intentional or unintentional threats to information assets, we commit to:

• Protecting the confidentiality, integrity, and availability of all corporate and personal information within the defined scope,
• Providing our services in full compliance with legal regulations, legislative requirements, and contractual obligations, in an accurate, timely, and uninterrupted manner,
• Allocating the necessary resources for the establishment, operation, and continual improvement of our Information Security Management System (ISMS) in accordance with the requirements of the ISO/IEC 27001 standard,
• Ensuring that business processes are carried out in line with policies and procedures prepared and approved within the scope of the ISMS,
• Complying with all legal regulations and contractual obligations related to information security,
• Identifying and systematically managing risks related to information assets,
• Delivering training programmes to develop both technical and behavioural competencies, with the aim of raising awareness of information security,
• Establishing a dynamic structure to adapt to developments and changes in the field of information technology, and strengthening communication with relevant authorities.