Information Security Policy
Purpose
The purpose of the Information Security Policy is to prevent information security incidents or minimize the risk of damage to ensure business continuity of DIZAYN KLIPS CONNECTION ELEMENTS MANUFACTURING IND.TRADE.LTD.CO. and reduce the impact of potential threats.
In this context, an Information Security Management System has been established and compliance with the ISO 27001:2022 standard has been targeted.
Scope
This policy covers the information assets within DIZAYN KLIPS CONNECTION ELEMENTS MANUFACTURING IND.TRADE.LTD.CO. It is applied by employees at the DIZAYN KLIPS location, suppliers and/or contractors inside and outside the location.
Responsibility
The Information Security Committee is responsible for keeping risks to company information assets at an acceptable level approved by senior management within the scope.
Policy
The goal of the policy is to protect the company's information assets against internal and external deliberate or unintentional threats. DIZAYN KLIPS CONNECTION ELEMENTS MANUFACTURING IND.TRADE.LTD.CO. managers have approved this policy.
The Information Security Policy ensures all the following requirements;
-
Identification of processes and information assets and methodical risk assessments related to them,
-
Protection of information from unauthorized access,
-
Ensuring the confidentiality of information,
-
Protecting the integrity of information,
-
Making information accessible whenever business processes need it,
-
Fulfillment of legal obligations and legal obligations arising from contracts,
-
Development and improvement of business continuity plans,
-
Providing Information Security training to all employees,
-
Ensuring that all Information Security violations or suspicions of violation are reported to the Information Security Committee and investigated.
Procedures and related instructions have been defined to support this policy. Information Security requirements are provided considering business needs.
The Information Security Committee ensures the development, documentation and continuous improvement of this policy and all related documents, Information Security Management System.
All management staff is responsible for ensuring that the units they manage comply with this policy and related procedures.
Compliance with the Information Security Policy is mandatory for all employees.