Adhering to Laws of the Republic of Turkey, relevant legislation, and administrative regulations pertaining to information security,
Upholding the confidentiality of all stakeholders’ data in personal and electronic communications, as well as in information exchanges with third parties,
Ensuring that confidentiality or non-disclosure agreements are signed by personnel who have been granted access to confidential information within the company before they are provided access to information and other related assets,
Implementing comprehensive training programs for all employees to foster and advance information security awareness,
Establishing and maintaining reliable backup systems in accordance with the criticality level of information,
Ensuring that internal information resources are not shared with unauthorized parties,
To ensure that the Agency’s IT assets are not employed for purposes that contravene the Laws of the Republic of Turkey and pertinent regulations,
To undertake the immediate review and revision of policies upon any amendments to information security-related terms and conditions, legal frameworks, regulations, information security policies, or any subject-specific directives,
To guarantee the adherence to information security standards stipulated by both national and international legal frameworks, ensuring compliance with relevant legislative requirements, and fulfilling obligations derived from agreements with internal and external partners,
In the event of a violation of information security protocols, to enforce sanctions deemed necessary within the confines of applicable legislation, and to implement corrective measures in cases where employees fail to comply with the organization’s established security mandates,
We are resolutely committed to the continuous improvement and refinement of the system by systematically evaluating the core elements of confidentiality, integrity, and accessibility within the Information Security Management System. This ensures the creation of a robust framework for managing risk and achieving the overarching goals of business continuity and information security.
