ISO 27001 Information Security Management System Policy:

The main theme of TS EN ISO 27001:2022 Information Security Management System is to demonstrate that information security management is provided within human, infrastructure, software, hardware, user information, organizational information, third party information and financial resources, to ensure risk management, and to use third party methods regarding information security during the information security management process at ESEN System Integration.

The purpose of our Information Security Management policy is;

• It undertakes to protect  the information assets of ESEN System Integration against threats that may come from inside or outside, intentional or unintentional, providing accessibility to information with business processes as required, to meet the legal requirements, to make continuous improvement work.
• Aiming to ensure continuity of three basic elements of Information Security Management System in all activities carried out:
  • Privacy: Preventing unauthorized access to important information,
  • Integrity: Showing that the accuracy and integrity of the information is ensured,
  • Accessibility: Demonstration of accessibility of authorized persons to information when necessary
• To determine roles and responsibilities and necessary resources within the framework of ISO 27001:2022 standard and ISMS application requirements,
• Dealing with the security of not only data held in electronic media, but all data contained in written, printed, verbal and similar media
• Aiming to maximize the level of awareness and compliance with security requirements of employees by providing Information Security Management training to all personnel,
• Aiming to minimize information security breach events, to report any threat or incident in Information Security that actually exist or are suspicious to the ISMS team and ensure that they are investigated by the ISMS team
• Preparing, maintaining and testing business continuity plans
• To determine current risks by making periodic risk assessment about Information Security; As a result of these risk assessment, reviewing and following up the action plans
• To prevent all kinds of disputes and conflict of interest that may results from contracts
• Accessibility to information, and meeting business requirements for information system

Memberships

ESEN is a member of the following organizations: