In the implementation of this policy, our company aims to fulfill the conditions required by the laws and regulations to which it is bound and to meet the conditions in generally accepted practices where deemed appropriate, to protect all information assets in its critical systems, to work in compliance with legislation, contracts and international standards within the framework of information security, to manage the risks in the information security management system, to carry out corrective and continuous improvement activities and to establish a sustainable system in accordance with the purpose of establishment.