TO ENSURE THE CONTINUOUS DEVELOPMENT OF OUR INFORMATION SECURITY MANAGEMENT SYSTEM WITHIN OUR ORGANIZATION:

DEFINING INFORMATION ASSETS, THE IMPACT OF THESE ASSETS ON THE BUSINESS: addressing issues such as the cost of replacing the asset, the confidentiality of information, its impact on image, and the damage it may cause in terms of legal and regulatory obligations,

THREAT LIKELIHOOD: addressing the multitude of vulnerabilities and how well existing controls can cover these vulnerabilities, attacker motivation, the appeal of the information for competitors, gaps in access controls, and dangers regarding the integrity of the information,

IDENTIFYING AND EVALUATING RISKS RELATED TO THE CONFIDENTIALITY, INTEGRITY, AND ACCESSIBILITY OF INFORMATION;

IMPLEMENTING NECESSARY CONTROLS FOR ALL ASSETS THAT EXCEED ACCEPTABLE LEVELS;

MEASURING THE PERFORMANCE OF INFORMATION SECURITY PROCESSES;

GENERATING OBJECTIVES FROM THESE DATA;

MINIMIZING OUR VULNERABILITIES AND THREATS THROUGH INFRASTRUCTURE, WORKING ENVIRONMENTS, HARDWARE, SOFTWARE, AND TRAINING INVESTMENTS;

MEETING THE SECURITY REQUIREMENTS REQUIRED BY OUR BUSINESS, OUR CUSTOMERS, AND LEGAL CONDITIONS

WE COMMIT.

Policies are reviewed in management review meetings and revised as necessary in line with the established objectives.
When establishing policies in Information Security; it is also communicated that Privacy, Integrity, and Availability will be taken into account in the processing, transmission, and storage of information, and the risk management approach is emphasized.

GENERAL MANAGER