Information security
Information security
- Managing information assets, determining the security values, needs and risks of assets, developing and implementing controls for security risks
- To define the framework that will determine the methods for determining information assets, values, security needs, vulnerabilities, threats to assets, and frequency of threats.
- Define a framework for assessing the privacy, integrity, accessibility impacts of threats on assets.
- To set out the working principles for handling risks.
- To monitor the risks continuously by reviewing the technological expectations in the context of the scope of service.
- To meet the information security requirements arising from the national or international regulations to which it is subject, fulfilling the legal and relevant legislation requirements, meeting the obligations arising from the agreements, and Company responsibilities for internal and external stakeholders.
- To reduce the impact of information security threats on service continuity and to contribute to continuity
- To have the competence to respond quickly to information security incidents that may occur and to minimize the impact of the incident.
- To maintain and improve the level of information security over time with a cost-effective control infrastructure.
- To improve the reputation of the company, to protect it from negative effects based on information security.
