As RHG Enertürk Enerji Üretim ve Ticaret A.Ş. (RHG Enertürk), within the scope of our Information Security Policy, we are committed to:
· Protecting both individuals and information,
· Ensuring secure access to our own and our stakeholders’ information assets,
· Defining the competencies of all personnel within the scope of information security,
· Providing secure access to RHG Enertürk’s information assets and preventing unauthorized access,
· Preserving the availability, integrity, and confidentiality of information,
· Assessing and managing risks that may arise concerning information assets,
· Implementing necessary investments to prevent information security breaches,
· Complying with all applicable national, international, and sectoral regulations, legal and legislative requirements, contractual obligations, and corporate responsibilities toward internal and external stakeholders, and fulfilling the resulting information security requirements,
· Minimizing the impact of information security threats on business/service continuity and ensuring operational sustainability,
· Maintaining and improving the level of information security through the established control infrastructure,
· Conducting training programs to enhance technical and behavioral competencies and increase information security awareness,
· Ensuring the continual improvement of the Information Security Management System (ISMS),
· Defining necessary information security roles and responsibilities, providing required resources, and assigning related authorities,
· Fulfilling all responsibilities regarding the processing, protection, and disposal of personal data belonging to employees, interns, visitors, suppliers, and other relevant third parties, in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and other related legislation.
We hereby declare, commit, and publicly announce our dedication to these principles.