Information Security Policy

Faydasıçok Holding A.Ş. and its group companies aim to establish, implement and continuously improve an Information Security Management System (ISMS) in order to protect the confidentiality, integrity and availability of their information assets.

In this context:

identify the information security needs of relevant parties and their requirements, and implement the necessary controls within the scope of risk analysis;

prepare and communicate policies, procedures and instructions to manage and control ISMS-related risks;

increase personnel awareness of information security;

maintain a sufficient number of personnel in relation to the ISMS or improve the knowledge level of existing personnel;

guide and support people so that they contribute to the effectiveness of the ISMS;

support ISMS-related management roles so that they can demonstrate leadership within their areas of responsibility;

allocate the resources required for the ISMS at a level deemed acceptable within the risk analysis framework;

identify information assets;

analyse the risks associated with information assets;

select and implement appropriate controls for the risks analysed;

prepare and improve a Statement of Applicability by relating the selected controls to those specified in Annex A of ISO 27001:2013;

regularly measure the performance of implemented controls and determine their effectiveness;

conduct regular internal audit activities covering the ISMS;

take corrective action and measures concerning nonconformities without delay;

improve the ISMS by holding regular management review meetings.

we undertake to fulfil these commitments.

As in all activities of our organisation, the ISMS infrastructure is operated in accordance with the principles of independence, integrity, impartiality, confidentiality and reliability.

All personnel and employees of third-party companies are required to comply with the documents included in the management system within the framework of their duties and responsibilities.