Information Security Policy
The purpose of this policy is to protect the information assets of MELİKE TEKSTİL and its affiliated group companies, support business continuity, manage information security risks, prevent information security incidents, and minimize the adverse impacts of any incidents that may occur on the organization.
Accordingly, the Information Security Management System (ISMS) is established, implemented, maintained, and continually improved in accordance with the requirements of ISO/IEC 27001:2022, taking into account the organization's operations, business needs, information security risks, and legal and contractual obligations.
This policy covers the activities, processes, information assets, information systems, technological infrastructure, physical environments, and relevant third parties managed by MELİKE TEKSTİL and included within the scope of the Information Security Management System (ISMS). The policy applies to all employees, consultants, suppliers, contractors, and other relevant parties who work at locations within the defined scope or have access to the organization's information assets.
Top management is responsible for providing the necessary resources and demonstrating leadership in information security management to ensure that the Information Security Management System (ISMS) is implemented in alignment with the organization's strategic direction and business needs. Top management ensures that information security risks within the defined scope are managed in accordance with the organization's established risk acceptance criteria, that risks are maintained at acceptable levels, and that necessary actions are monitored and followed up. Information security roles, responsibilities, and authorities are defined, communicated to relevant personnel, and updated as necessary.
The Organization;
To protect information assets against intentional or unintentional threats originating from internal and external sources,
To systematically identify, assess, and treat information security risks using a structured and methodological approach,
To ensure the confidentiality, integrity, and availability of information,
To ensure that authorized personnel can access the information required for business processes when needed,
To comply with applicable legal, regulatory, and contractual obligations related to information security,
To establish, monitor, and review information security objectives and targets in alignment with the organization's strategic direction, business needs, and information security risks,
To carry out the necessary planning and improvement activities to ensure business continuity and the continuity of information systems,
To ensure that information assets are backed up according to business needs, stored in secure environments, and that their recoverability is verified when necessary,
To provide employees and relevant parties with information security awareness and training appropriate to their roles and responsibilities,
To ensure that information security incidents and suspected breaches are reported, assessed, documented, and addressed through appropriate actions in accordance with established procedures,
To establish and implement information security policies and procedures in accordance with the organization's needs,
To continually improve the suitability, adequacy, and effectiveness of the Information Security Management System (ISMS)
we hereby commit to the above.
