The main theme of the TS EN ISO 27001 Information Security Management System is to demonstrate that information security management is in place within DEVNAK NAKLİYAT A.Ş., ensure risk management, measure the performance of the information security management process, and regulate relationships with third parties related to information security.

In this context, the purpose of our Information Security Management System (ISMS) Policy is:

- To protect DEVNAK NAKLİYAT A.Ş.'s information assets against any type of threat that may occur, whether knowingly or unknowingly, ensuring access to information as required by business processes and complying with legal regulations.

- To ensure the continuity of the three fundamental elements of the Information Security Management System in all activities conducted:

  Confidentiality: Preventing unauthorized access to sensitive information.
 
  Integrity: Demonstrating the accuracy and integrity of information.
 
  Accessibility: Demonstrating that authorized personnel can access information when needed.

- To address the security of all data, not only electronically stored data but also data in written, printed, verbal, and similar formats.

- To raise awareness by providing Information Security Management training to all personnel.

- To ensure that all existing or suspicious vulnerabilities in Information Security are reported to the ISMS Team and investigated by the ISMS Manager.

- To prepare, maintain, and test business continuity plans.

- To periodically assess Information Security by identifying existing risks. After assessments, review and follow up on action plans.

- To prevent any disputes and conflicts of interest arising from contracts.

- To meet the requirements of accessibility to information and information systems without any omissions.