1. Purpose
The purpose of this policy is to define the fundamental information security principles and to express the support provided by top management for these principles.
2. Scope
The scope of this policy covers the entire organization of ProCheck Technical Services Inc. and all information assets owned by the company.
3. Responsibilities
3.1 General Manager
The General Manager is responsible for ensuring that the policy meets the company’s information security needs, providing the necessary resources and oversight for its implementation, and reviewing the policy at least once a year or whenever changes are required.
3.2 ISMS Representative
The ISMS Representative appointed by the General Manager is responsible for ensuring that the Information Security Policy meets the company’s needs and for providing the necessary support and supervision for its implementation.
3.3 All Personnel
All personnel are responsible for fulfilling the requirements of the Information Security Policy in accordance with the responsibilities of their respective roles.
4. Definitions
- ISMS: Information Security Management System
- Confidentiality: Ensuring that information is accessible only to authorized individuals
- Integrity: Preventing unauthorized or incorrect modification of information and ensuring such changes are detectable
- Availability: Ensuring that information is accessible whenever it is needed
5. Implementation
Mission
To support digital transformation processes in a secure and sustainable manner by providing innovative, reliable, and high-quality solutions to our customers.
Vision
To become a reference company in the field of information security and technical services across different sectors at national and international levels.
ISMS Policy
- Managing information assets, identifying their risks, and implementing security controls
- Assessing threats to confidentiality, integrity, and availability
- Defining the principles for risk treatment and keeping up with technological developments
- Ensuring compliance with national and international regulations and legal requirements
- Ensuring service continuity and responding rapidly to incidents
- Continuously improving the level of information security
- Increasing employee training and awareness on ISMS
- Improving the system based on audit and corrective action results
- Meeting the requirements of data protection legislation (KVKK)
- Protecting corporate reputation and customer trust
6. Sanctions
Disciplinary Procedure provisions shall be applied to all personnel who do not comply with this policy.