Our information and information security requirements will be aligned with our corporate goals. Our company management will employ well-trained, competent personnel open to change, and will secure the necessary financing, equipment, and infrastructure to compete with our rivals in the sector. This infrastructure and personnel will be secured along with the necessary funding. Business continuity and emergency plans, data backup procedures, protection against viruses and hackers, access control systems, and information security breach reporting will form the cornerstones of our core operations. Vulnerabilities and threats identified through risk assessments will be eliminated to ensure secure access to our customers' and personnel's information. Furthermore, based on risk assessment results, we will define our objectives and provide the necessary resources and conditions to achieve them.

 

To implement this policy, we primarily expect our employees to integrate the Information Security Management System requirements into their work practices. All personnel and certain third parties will receive appropriate training related to the Information Security Management System.

 

The applicable requirements related to information security, as well as the opportunities and necessities they present, will be fulfilled and continuously improved. Furthermore, the adaptation of our company, our personnel, and all relevant parties to this system will be ensured.

 

Our Information Security Policy is reviewed annually, or whenever significant changes occur within our company, with the participation of management and department heads to ensure its suitability, accuracy, and effectiveness, and to keep it up-to-date.