Company Privacy Policy
 

NETSEC is aware that confidentiality, integrity and accessibility of all forms of information play a critical role in the sustainable success and good management practices of the Company, and that failure to provide information security at an adequate level will increase the risk of reputational damage as well as financial losses.

This information security policy outlines NETSEC's approach to Information Security management, as well as setting forth the guiding principles and responsibilities required to protect the security of information systems.

NETSEC undertakes to establish, implement, operate, monitor, review, maintain and continuously improve the Information Security Management System in accordance with TS ISO/IEC 27001 and TS ISO/IEC 27701 Standards in order to ensure the confidentiality, integrity and accessibility of the information it is responsible for protecting.

As NETSEC, which provides and carries out Information Security services;

To follow current cyber threats related to our activities with a “zero day” logic,

To comply with the terms and legal requirements arising from contracts,

To ensure that the activities carried out are carried out effectively, accurately, quickly and securely,

To carry out the Information Security services activities we carry out in accordance with the standards required by the sector,

To carry out our activities with the awareness of the risks on confidentiality, accessibility and integrity in accessing all kinds of information assets belonging to our company, customers, employees, suppliers and business partners,

To ensure that the information security management system and information security awareness become a corporate culture,

To ensure that the necessary plans are prepared, implemented and tested to ensure business continuity and service continuity,

To ensure that the risks to our information assets and processes are assessed and processed in accordance with accepted risk management methodologies,

To be in contact with special interest groups in order to benefit from the developing technologies and knowledge accumulation in our sector in which we provide information-based services,

Law on the protection of personal data, We undertake to comply with regulations and other legislation, taking the ISO 27701 Personal Data Management Standard as reference,
to all our stakeholders.