English translation provided for company review. The complete company-supplied Turkish policy is available through the TR language link and the Turkish PDF download. The download is not an English legal translation.
Original Turkish document · PDF and Word
Purpose
Within the scope of the electronic communications, voice and SMS services it provides, our company adopts as a fundamental principle the protection of the confidentiality, integrity and availability of information assets belonging to its customers, business partners and all relevant parties.
Our Information Security Management System (ISMS) has been established in line with ISO/IEC 27001:2022 and aims to ensure the effective management of information security risks.
Our commitment
Our company commits to:
- Protecting the confidentiality, integrity and availability of information assets;
- Identifying and assessing information security risks and managing them through appropriate controls;
- Complying with national and international legislation, regulatory decisions, contractual obligations and other applicable requirements relating to information security;
- Protecting information belonging to customers, employees and business partners against unauthorised access, alteration, disclosure, loss or misuse;
- Providing employees with the training needed to increase information security awareness;
- Implementing security measures that support business continuity;
- Recording information security incidents and carrying out the necessary corrective and preventive actions;
- Ensuring suppliers and business partners act in accordance with information security requirements;
- Regularly reviewing the performance of the Information Security Management System and continually improving it.
Scope
This policy covers our company’s electronic communications, voice and SMS services and all business processes, employees, information assets, information systems, physical and digital environments and service suppliers that support these services.
Responsibility
Information security is the shared responsibility of all company employees, not only the IT department. All personnel must comply with this policy and the relevant ISMS procedures.
Entry into force
This policy entered into force following approval by senior management. It is reviewed and updated at least once a year or whenever necessary.