TS EN ISO 27001 Information Security Management System's main focus is to demonstrate that information security management is in place within DEVNAK NAKLİYAT A.Ş., ensure risk management, measure the performance of information security management processes, and regulate relationships with third parties regarding information security.

​

In this regard, the purpose of our ISMS Policy is:

​

- To protect DEVNAK NAKLİYAT A.Ş.'s information assets against all types of threats that may occur knowingly or unknowingly, ensure access to information as required by business processes, and comply with legal regulations.
- To ensure the continuity of the three fundamental elements of the Information Security Management System in all activities conducted:

Confidentiality: Preventing unauthorized access to sensitive information.
Integrity: Demonstrating the accuracy and integrity of information.
Accessibility: Demonstrating that authorized personnel can access information when needed.
- To address the security of all data, not only electronically stored data but also data in written, printed, verbal, and similar formats.
- To raise awareness by providing Information Security Management training to all personnel.
- To ensure that all existing or suspicious vulnerabilities in Information Security are reported to the ISMS Team and investigated by the ISMS Manager.
- To prepare, maintain, and test business continuity plans.
- To periodically assess Information Security by identifying existing risks. After assessments, review and follow up on action plans.
- To prevent any disputes and conflicts of interest arising from contracts.
- To meet the requirements of accessibility to information and information systems without any omissions.

​

​

​

​