The Information Security Management System Policy aims to ensure business continuity and minimize risks within the framework of legal and regulatory requirements at Göltaş Çimento.
The purpose of this policy is to protect Göltaş Çimento’s information assets against all internal, external, intentional, or accidental threats while ensuring the continuity of critical and supporting business activities.
This policy covers Göltaş Çimento’s information assets and all parties with whom the company communicates or interacts.
The Policy ensures the following: a. The integrity, confidentiality, and availability of information are ensured. b. Legal and regulatory requirements, as well as provisions related to Information Security included in agreements with business partners, customers, and suppliers, are monitored and fulfilled. c. Access to information is granted based on the need-to-know principle. d. In addition to company data, personal, financial, and strategic data entrusted to the Company by its customers, partners, and employees are also protected. Such data is classified according to its confidentiality level, and access and protection standards are established accordingly. e. Within this scope, business continuity plans are maintained up to date and tested regularly. f. Information Security Training is mandatory for all employees and is repeated at defined intervals.
Procedures are prepared to support and complement the Policy.
An Information Security Team has been established and authorized for the planning, establishment, operation, and continual improvement of the ISMS.
Information Security Objectives are determined annually and monitored by the Information Security Team.
Managers are responsible for ensuring the implementation of the Policy and raising awareness among their teams.
The Information Security Policy must be understood by all parties interacting with GÖLTAŞ Çimento.
The ISMS Policies are reviewed at least once a year by the Information Security Team and updated when necessary.
The ISMS is an integral and indispensable part of the Company culture.
The Information Security Policy has been approved by the Member of the Board of Directors and Managing Director of Göltaş Çimento.