Information Security Policy

Protection of Information & Corporate Assets

Protecting the company’s assets is a fundamental priority for ensuring our smooth operation and sustainable growth. To achieve this, the company has established and implemented an Information Security Management System (ISMS), incorporating processes and controls designed to safeguard its information assets.

As business needs and requirements continue to evolve, we recognize the importance of continuously improving our Information Security Management System. We regularly establish new objectives, assess our procedures, and review them at defined intervals to ensure their ongoing effectiveness.

Through this policy we ensure:

• Information is accessible only to authorized personnel.
• Information may only be modified by authorized users.
• Information remains available whenever required by authorized individuals.
• Our personnel are appropriately trained in information security management and understand their responsibility to comply with the company’s policies, procedures, and work instructions.
• All security incidents and suspected vulnerabilities are reported, assessed, and thoroughly investigated.
• Business continuity plans have been developed, implemented, maintained, and regularly tested.
• Technical and organizational security measures are continuously reviewed and improved.

The Information Security Management Representative is responsible for maintaining this policy and providing guidance and support throughout its implementation. Compliance with the Information Security Policy is mandatory for all employees and external partners of the company.

This policy has been approved by the company’s Management, is updated whenever changes occur in the organization’s operational environment, and is reviewed as part of every Information Security Management System review.