Information Security Policy

To define risk acceptance criteria and risks, and to develop and implement controls.

Within the scope and limits of the Information Security Management System (ISMS), we acknowledge that all confidential/commercial/private information processed in all information technology systems we serve constitutes the privacy of the client of the institution/organization we serve. This information will be made inaccessible to anyone/anyone/institution/organization without the client's knowledge/consent, adhering to the principles of Confidentiality/Integrity/Accessibility.

Provided it remains within the scope and limits of the IMS, the IMS policy will comply with legal and regulatory requirements, and will take into account contractual obligations or dependencies of third parties.

The necessary operational and technical support services for the continuous operation of existing Field Services and Maintenance-Repair services in institutions/organizations will be provided within the scope and limits of the IMS.

To define a framework for evaluating the confidentiality, integrity, and accessibility impacts of information within the scope of the information security management system.

Continuously monitoring risks by reviewing technological expectations within the scope of services provided.

Ensuring information security requirements arising from national or sectoral regulations, legal and relevant legislation, fulfilling obligations arising from agreements, and corporate responsibilities towards internal and external stakeholders.

Mitigating the impact of information security threats on service continuity and contributing to continuity.

Having the competence to quickly respond to potential information security incidents and minimize their impact.

Maintaining and improving the information security level over time with a cost-effective control infrastructure.

Enhancing corporate reputation and protecting against negative impacts based on information security. Within the scope of our company's information security, an information classification guide has been created to increase corporate awareness regarding information with different levels of sensitivity, to identify and implement logical, physical, and administrative controls recommended for information with different sensitivity levels, and to define the rules for storing and destroying data on portable media.

Our company's Senior Management commits to the implementation, review, and continuous improvement of Information Security practices.