| Document no. | PO.00 | Issue date | 20.09.2024 |
|---|---|---|---|
| Revision no. | 00 | Revision date | – |
| Classification | Internal use | ||
LABOR BİLİŞİM MEDİKAL İNŞAAT YAYINCILIK TİCARET LİMİTED ŞİRKETİ places customer satisfaction at the centre of its activities in “computer programming (coding of systems, databases, networks and web software, and of software developed to customer specification)”. We pay the utmost attention to the environment, human health, information security, the protection of personal data and quality; we seek to understand legislation, standards and customer expectations, and to deliver projects that anticipate future needs.
Our policy
- Manage information assets; determine their security values, needs and risks; develop and apply controls against security risks.
- Define the framework that sets the methods for identifying information assets, their values, security needs and vulnerabilities, the threats against them and the frequency of those threats.
- Define a framework for assessing the impact of threats on the confidentiality, integrity and availability of assets.
- Establish the working principles for treating risks.
- Continuously monitor risks by reviewing technological expectations within the scope of the services provided.
- Meet the information security requirements arising from national and international regulations, from legal and regulatory obligations, from contractual commitments, and from the company’s responsibilities towards internal and external stakeholders.
- Reduce the impact of information security threats to service continuity and contribute to that continuity.
- Maintain the capability to respond rapidly to information security incidents and to minimise their impact.
- Preserve and improve the level of information security over time through a cost-effective control infrastructure.
- Provide all personnel with awareness and information training on the Information Security Management System policy and processes, and repeat that training at defined intervals.
- Continuously improve the system in the light of implementation, audit and corrective action results within the scope of the Information Security Management System.
- Operate the Information Security Management System in an integrated manner with the company’s other management systems.
- Work to understand and meet the requirements of the Turkish Law on the Protection of Personal Data (KVKK) and of the GDPR.
- Enhance the company’s reputation and protect it from adverse effects originating in information security.
As LABOR BİLİŞİM, we undertake to implement, review and continuously improve the practices related to the Integrated Management System.
General Manager
Cihan Özel