ABOUT US

Information Security and Privacy Policy

BG-TEK Group Companies recognizes that the confidentiality, integrity, and availability of all types of information play a critical role in its sustainable success and good governance practices. Failure to provide adequate information security not only increases the risk of financial losses but also the risk of reputational damage.

This information security policy outlines BG-TEK Group Companies' approach to managing information security and defines the guiding principles and responsibilities necessary to protect the security of information systems.

BG-TEK Group Companies is committed to establishing, implementing, operating, monitoring, reviewing, maintaining, and continually improving its Information Security Management System in accordance with TS ISO/IEC 27001 and TS ISO/IEC 27701 standards to ensure the confidentiality, integrity, and availability of the information it is obligated to protect.

As BG-TEK Group Companies, which provide information security services and conduct R&D activities, we commit the following to all our stakeholders:

• We will monitor current cyber threats with a "zero day" approach and comply with the requirements arising from contracts and legal obligations,
• We will ensure that the activities we carry out are performed effectively, accurately, quickly, and securely, and that the security testing services we provide are conducted in accordance with the standards required by the industry,
• We will conduct our activities with an awareness of the risks to the confidentiality, integrity, and availability of the information assets belonging to our company, our customers, employees, suppliers, and business partners,
• We will make information security management and awareness a part of the corporate culture,
• We will prepare, implement, and test the necessary plans to ensure business continuity and service continuity,
• We will ensure that risks to our information assets and processes are evaluated and processed in accordance with accepted risk management methodologies,
• We will maintain communication with relevant special interest groups to benefit from developing technologies and knowledge within the sectors we serve,
• We will comply with personal data protection laws, regulations, and other legislation by adhering to the ISO 27701 standard for personal data management,

We commit to all our stakeholders.

GENERAL MANAGER
Kamil BURLU