Information Security Policy

The legally binding version of this text is the Turkish version. Türkçe metin →

At Turkuaz Healthcare, our aim is to ensure the security of information assets in every form, as well as of the locations and processes used in carrying out the company’s activities, with due regard to the principles of confidentiality, integrity and availability.

To achieve this aim, we undertake:

• to meet and exceed the requirements of laws, standards and our procedures on information security,
• to manage the Information Security Management System in accordance with ISO/IEC 27001:2022 Information Security, Cybersecurity and Privacy Protection – Information Security Management Systems (ISMS),
• to protect our information assets by controlling the storage, transmission, modification, access and processing of assets based on current best practice, and to ensure that in-process controls are in place under the principle of segregation of duties,
• to analyse periodically the information security risks to our information assets from the perspectives of confidentiality, integrity and availability, and to plan and carry out risk treatment activities to reduce them,
• to communicate this Policy to all our employees and to provide the resources and training (awareness, etc.) needed to implement it,
• to carry out, or have carried out, periodic internal and external audits to monitor compliance with and continual improvement of the ISMS, and to take their results into account in the meetings of the Information Security Committee and in Management Reviews,
• to take into account the information security performance of suppliers, contractors and their subcontractors when selecting them, and to cooperate with them on ISMS matters,
• to work constructively with official institutions and individuals on ISMS matters,
• to establish the organisational structure, resources and infrastructure needed to report information security breaches and take action as quickly as possible, and to apply the necessary sanctions in the event of security breaches,
• to continually improve the Turkuaz Healthcare ISMS.

01.07.2024 / R0