Our Information Security Management System (ISMS) Policy
As NEGZEL Teknoloji A.Ş., in the context of establishing the Information Security Management System (ISMS) related to the processes at the stages of providing services, we adopt and commit;
- To establish a risk management methodology that includes identifying information assets, determining risks, and taking control measures related to those risks in order to comply with the principles of confidentiality, integrity, and availability of information, which are the requirements of the Information Security Management System, for our institution, employees, stakeholders, and suppliers,
- To continuously improve our service quality within the scope of the activities of the Information Technologies Unit,
- To provide the necessary resources and maintain continuity for hardware, software, training, and other controls required to reduce information security risks,
- To implement necessary sanctions in case of information security violations,
- To protect the confidentiality of the information belonging to our employees and all stakeholders, to comply with the national, international, or sectoral regulations to which we are subject, to fulfill legal and related regulatory requirements, to meet the obligations arising from agreements, and to ensure the information security requirements stemming from institutional responsibilities towards internal and external stakeholders,
- To raise awareness, provide training, and incentivize all employees and business partners to participate in and comply with ISMS processes in ensuring information security,
- To increase institutional awareness about information with different levels of sensitivity in terms of confidentiality,
- To define rules for the collection, processing, transfer, protection, and secure destruction of personal data of employees, customers, visitors, suppliers, business partners, and other relevant third parties within the scope of the Personal Data Protection Law No. 6698 (KVKK) and other relevant legislation, and to fulfill all responsibilities of the Data Controller,
- To protect information according to the classes we have determined by applying logical, physical, and administrative controls,
- To minimize the impact on climate change by preferring appropriate technologies, so that a clean and healthy environment sensitive to climate change is passed on to future generations,
- To control the efficiency of the ISMS through internal and external audits; to monitor, review, and keep the system continuously compliant, and to improve it continuously
as our ISMS policy.