At SERBAN İnşaat Sanayi ve Ticaret A.Ş., in order to protect the reputation, image, brand value and credibility of our stakeholders in all our activities, we are committed to:
+ Addressing information assets in terms of confidentiality, integrity and availability in order to ensure the continuity of our business processes, and assessing the risks and opportunities arising in this context;
+ Structuring our Information Security Management System (ISMS) so that records and documentation are established, reviewed and continually improved in accordance with the ISO 27001 standard;
+ Ensuring that our activities comply with the requirements of primary and secondary legislation, first and foremost statutory requirements, as well as with contracts, standards and business processes;
+ Clarifying duties, roles and responsibilities, and providing the necessary resources, within the framework of the ISO 27001 standard and ISMS implementation requirements;
+ Providing regular training to raise our employees' information security awareness, and using all our resources effectively and efficiently to this end;
+ Encouraging our suppliers and business partners to comply with information security requirements as well;
+ Continuously monitoring the cyber risks that threaten information security, and establishing an effective incident management and response process for potential security incidents;
+ Assessing information security risks on a regular basis, and continuously updating our preventive and corrective actions in order to adapt to the changing threat landscape;
+ Clearly stating that we expect all our employees to comply with information security requirements and to take personal responsibility in this regard.
