In accordance with the principles of independence, impartiality, and confidentiality;
KÂR Katılım Altın Rafinerisi A.Ş. has established and put into practice its core principles relating to the protection of the confidentiality, integrity, and availability of information assets owned by or under its responsibility, with regard to the delivery of quality services, customer satisfaction, and confidentiality.
Drawing on the Information Security Management System certified under ISO/IEC 27001:2022, the Information Security Management System policy is as follows:
To treat data obtained from internal and external sources as valuable and critical, and to fulfil all obligations required by legislation pertaining to information security,
To provide the necessary infrastructure to ensure that access to personal and private data is restricted to authorised individuals only, thereby ensuring the uninterrupted continuity of information technology services used in the conduct of institutional activities, and to implement the requisite security measures for the protection of personal and private data,
To fully comply with the requirements of the Information Security Standard and to deliver services in accordance with this standard; to protect, maintain, and manage the confidentiality, integrity, and availability of information and all supporting business systems, processes, and applications,
To report, classify, and respond to information security incidents; to preserve evidence, mitigate impacts, and conduct activities to prevent recurrence,
To ensure stakeholder satisfaction by adhering to the adopted policies and standards,
To implement legal and regulatory requirements without compromise and to continuously assess compliance therewith,
To enhance awareness of and sensitivity to information security by providing training that develops both technical and behavioural competencies,
To implement the Information Security Policy as an integral part of the Company's other policies, and to share the relevant approaches and priorities with the public and other interested parties.
We hereby confirm the foregoing and declare and undertake that the adherence of our company personnel to these principles is of the utmost importance for the effectiveness of all operational processes.
ACCESSIBILITY AND TRANSPARENCY OF THE POLICY
This Policy is published and made accessible to relevant stakeholders through the Company's official website and appropriate communication channels. The Company commits to maintaining the Policy in a publicly accessible, transparent, and up-to-date manner in accordance with the principle of transparency.
Information Security Policy
ISO: 27001: 2022