Information Security Policy

Kurumsal Yazilim A.S. Information Security has adopted the following objectives as policy to protect the corporate reputation, reliability, and information assets, and to ensure that core and supporting business activities continue with minimal interruption:

To protect the information assets processed, stored, and shared with other organizations by the institution in accordance with the principles of confidentiality, integrity, and availability,
To develop and continuously improve the management system established to manage information assets, determine their security values, needs, and risks, and implement controls for security risks,
To identify continuous improvement needs and opportunities by evaluating risks arising from activities in line with the corporate vision and mission,
To keep pace with and follow technological developments and changes within the scope of services provided,
To ensure business continuity by reducing the impact of information security risks,
To comply with national and international regulations, legal and relevant legislative requirements, obligations arising from agreements, and corporate responsibilities towards internal and external stakeholders,
To have the competence to respond quickly to potential information security incidents and minimize their impact,
To maintain and improve the level of information security over time with a cost-effective control infrastructure,
To enhance corporate reputation and protect it from negative effects based on information security,
To safeguard personal information within the scope of the Personal Data Protection Law,
To conduct training that develops employees' information security awareness and competencies, provide the necessary support, and become an exemplary organization in the sector, integrated with other management systems.

Every member of the companies under the Kurumsal Yazilim A.S. umbrella is responsible for acting in line with these stated objectives and contributing to the system.