Information Security Management System Policy

Information Security Management System has been established to create a framework for information security requirements to be complied with employees and relevant parties within Istanbul Energy Co. General Directorate, to determine written rules, and to ensure the;

• CONFIDENTIALITY of all information assets to be known only by the authorized personnel
• INTEGRITY in order to keep the information correct and complete, and to keep the revisions and changes under control
• ACCESSIBILITY in order to ensure that authorized persons can use the information whenever they need it.

In line with our company's vision and mission, information security is treated as a strategic issue and managed with a risk and process-oriented approach, with the aim of achieving the following benefits:

• Ensuring business continuity
• Complying with the defined, implemented, and ongoing Information Security Management System, allocating the necessary resources for the system to operate efficiently, continuously improving its effectiveness, and ensuring that all employees understand it.
• Identifying, determining, evaluating, and controlling relevant risks within the framework of the strategic business plan and risk management to establish and ensure the continuity of the information security management system
• Complying with all legal regulations and contracts related to information security
• Improve our business processes by integrating them with the ISMS.
• Implement a security mindset that starts at the top and extends down to the lowest level of the company's personnel.
• Allocate the resources required for comprehensive information security efforts.