Information Security Policy

Erka Etkinlik ve Turizm A.Ş., in accordance with the ISO 27001 Information Security Management System Standard, commits to:

a. Ensuring secure access to its own and its stakeholders’ information assets,
b. Preserving the availability, integrity, and confidentiality of information,
c. Identifying, assessing, and managing risks that may affect its own and its stakeholders’ information assets,
d. Protecting the Company’s reliability and brand image,
e. Applying appropriate sanctions in the event of an information-security breach,
f. Fulfilling all obligations arising from applicable national, international, and sector-specific regulations, relevant laws and standards, contracts, and corporate responsibilities toward internal and external stakeholders,
g. Mitigating the impact of information-security threats on business/service continuity and ensuring sustainable operations,
h. Maintaining and continually improving information-security levels through the established control infrastructure,
i. Providing training to develop competencies and raise information-security awareness.