Under our Information Security Management System (ISMS) Policy;
- To protect information assets against all types of threats, whether internal or external, intentional or unintentional; to ensure appropriate access to information in line with business processes; to comply with applicable legal and regulatory requirements; and to carry out activities aimed at continual improvement.
- To manage personal data and information assets; to identify their security value, requirements, and associated risks; and to develop and implement appropriate controls to address information security risks.
- To ensure the continuity of the three fundamental principles of the INFORMATION SECURITY, CYBERSECURITY AND PRIVACY PROTECTION MANAGEMENT SYSTEM across all activities carried out.
Confidentiality: Preventing unauthorized access to information and information assets,
Integrity: Ensuring and demonstrating the accuracy and integrity of information,
Availability: Ensuring that authorized users have access to information when required,
- To define the framework for establishing methods to identify personal data and information assets, their value, security requirements and vulnerabilities, as well as threats to those assets and the frequency of such threats.
- To provide the financial resources and personnel required for risk treatment.
- To continuously monitor risks by reviewing technological expectations within the scope of the services provided.
- To comply with national and international regulations, laws, and applicable legal requirements; to fulfill contractual obligations; and to meet information security requirements arising from corporate responsibilities toward internal and external stakeholders.
- To minimize the impact of information security threats on service continuity and contribute to maintaining uninterrupted operations.
- To develop, maintain, and test business continuity plans.
- To promote environmental sustainability and continue environmentally responsible and socially conscious initiatives addressing climate change.
- To ensure continual improvement.
We are committed to continuing to fulfill the requirements applicable to our activities.
Infodrom Yazılım Danışmanlık Hizmetleri