1. Ensuring secure access to its own and its stakeholders’ information assets,
2. Being aware of and managing risks on the confidentiality, accessibility, and integrity of all information assets belonging to our company, employees, customers, suppliers, and business partners,
3. Protecting the organization’s reliability and brand image,
4. Implementing necessary sanctions in case of information security breaches,
5. Creating full participation in information security throughout the company and high awareness in information security in the processes we own,
6. Systematically addressing information security to create a continuously improving, developing structure that prevents the emergence of new risks,
7. Establishing, implementing, and executing the management system with the goal of achieving highest performance in our processes; continuously auditing performance criteria and process activities, identifying necessary improvements, and implementing them by ensuring the applicability conditions of activities,
8. Encouraging leadership and employee participation in all our procedures with participatory and pluralistic management approach in our institution, thereby continuously developing our business processes,
9. Identifying and meeting the expectations of internal and external customers, suppliers and all other relevant contexts, society and shareholders in a balanced manner through a timely, fast and effective system using technological capabilities in corporate communication, supporting continuous improvement, learning and innovation, adopting and promoting the excellence approach,
10. Ensuring compliance with all customer requirements, national and international legal obligations and relevant standards,
11. Ensuring that process performance is measured with healthy data, accurate methods and systems, and providing input for continuous improvements