Our Information Security Management System Policy

Information Security Management System has been established to create a framework for information security requirements to be complied with employees and relevant parties within Istanbul Energy Co. General Directorate, to determine written rules, and to ensure the;

CONFIDENTIALITY of all information assets to be known only by the authorized personnel

INTEGRITY in order to keep the information correct and complete, and to keep the revisions and changes under control

ACCESSIBILITY in order to ensure that authorized persons can use the information whenever they need it.

In line with our company’s vision and mission, the information security is ensured to be dealt as a strategic aspect and managed with a risk and process-driven approach, and the following gains are aimed to be obtained;

To ensure business continuity

To conform to the Information Security Management System that has been defined, put into action and is being implemented, to allocate the resources necessary for the efficient operation of the system, to continuously enhance its effectiveness and to ensure that this is understood by all employees.

To define, identify, evaluate and control the relevant risks to establish and maintain the continuity of information security management system within the framework of the strategic business plan and risk management.

To comply with all legal regulations and contracts related to information security

To enhance our business processes by integrating with ISMS

To go down to the junior personnel of the company, with a security approach that starts from the upper levels and is implemented

To allocate the necessary resources for comprehensive information security studies