To maintain the reliability of our company and the image it represents, ensure compliance with contracts made with third parties, and ensure the continuity of our core and support business activities with minimal interruption by aiming to ensure the information security of all physical and electronic assets used in the provision of information technology services,
In all activities carried out, to ensure the continuity of the Information Security Management System by identifying, assessing, and applying necessary controls for all assets that are above the acceptable level of risk regarding the confidentiality, integrity, and accessibility of information,
To maintain and improve the level of information security with the established control infrastructure, not only for data held in electronic media but also for all data held in written, printed, verbal, and similar media,
To fulfill the requirements of national, international, or sectoral regulations, legal and relevant legislation, meet the obligations arising from agreements, and ensure the information security requirements arising from corporate responsibilities towards internal and external stakeholders,
To periodically assess information security, identify existing risks, and review and follow up action plans based on evaluations,
To raise awareness by providing Information Security Management training to all employees,
To report all actual or suspected vulnerabilities in Information Security to the ISMS Team and ensure investigation by this team,
To prepare, maintain, and conduct exercises for business continuity plans,
To prevent any disputes and conflicts of interest that may arise from contracts,
To meet the business requirements for information accessibility and information systems,
YAVUZ KART
General Manager