Information Security Policy

This is an English translation of our Information Security Policy. The Turkish version is authoritative.

Our company is committed to protecting the confidentiality and integrity of all physical and electronic information assets. Information and information security requirements will be aligned with our corporate objectives. Our management will employ well-trained, competent staff who are open to change, will provide the funding needed to compete within the sector, and will maintain adequate hardware and infrastructure. Business continuity and emergency plans, data backup procedures, protection against viruses and hackers, access control systems and information security breach reporting will form the cornerstones of our core activities. Vulnerabilities and threats identified through risk assessments will be eliminated, and secure access to the information of our customers and staff will be ensured.

In addition, we will set our objectives based on the results of risk assessments and provide the resources and conditions required to achieve them.

To implement this policy, we expect above all that our employees make the requirements of the Information Security Management System part of the way they work. All staff and relevant third parties will receive appropriate training on the Information Security Management System.

Applicable information security requirements, together with the opportunities and obligations they bring, will be fulfilled and continually improved. We will also ensure that our staff and all relevant parties adapt to this system.

Our Information Security Policy is reviewed once a year, or whenever there are significant changes concerning our company, with the participation of management and unit managers, to ensure its suitability, accuracy and effectiveness and to keep it up to date.