Objective
This Information Security Policy aims to ensure the security of all information in the custody of Sorentum Teknoloji Sanayi ve Ticaret Anonim Şirketi (“Sorentum Teknoloji”) and protect it against unauthorized access, disclosure, alteration, damage, or loss.
Scope
This policy applies to all information under the control of Sorentum Tech, regardless of its form – electronic, printed, or otherwise. It must be adhered to by all employees, contractors, consultants, and other parties associated with Sorentum Teknoloji.
Information Security Principles
Confidentiality: Information should only be accessible to those authorized, and must be protected against unauthorized access. Integrity: The accuracy and completeness of the information must be maintained. Availability: Information should be readily accessible as and when required by authorized personnel. Risk Management Sorentum Teknoloji will regularly assess and manage risks to information security. The applicable controls and measures will be determined based on the magnitude of the risk.
Access Control
Access to information will only be granted to authorized individuals. Such access will be limited based on job-related requirements.
Physical and Environmental Security
Appropriate physical and environmental measures will be adopted to protect information and information processing systems.
Information Systems and Network Security
The security of information systems and networks should be ensured using appropriate technological measures to safeguard information.
Monitoring and Response in Case of Breach
In the event of a breach of information security, a swift and effective response will be initiated. Breaches, when identified, will be appropriately investigated and necessary measures will be taken.
Review of the Policy
This policy will be reviewed at least once a year, and more frequently if necessary, and will be updated as required.
Policy Violations
Violations of this policy can lead to disciplinary action, up to and including termination of employment, and/or legal penalties.