COMPANY POLICIES

INFORMATION SECURITY POLICY

BAYBURT GROUP INC. has adopted the goal of ensuring the confidentiality, integrity, and accessibility of information in accordance with its mission and vision and in compliance with the TS EN ISO 27001:2013 Information Security Management System (ISMS). In this regard;

• To comply with the requirements of laws, standards, and procedures in the field of information security,

• To raise awareness by providing Information Security Management training to all employees,

• To prepare, maintain, test, and establish process standard procedures for business continuity plans,

• To comply with national and international regulations related to information security,

• To ensure that actions are taken as soon as possible in case of information security breaches and to apply necessary sanctions,

• To take necessary precautions for stakeholders to comply with the specified matters related to information security,

• To effectively manage continuous improvement by managing information security risks related to business processes,

• To develop solutions by monitoring current technologies and innovations related to information security,

• To protect information assets, ensure accessibility to information, and manage information systems in compliance with business requirements,

• To define how ISMS and the Personal Data Protection Law (KVKK) requirements are met,

We commit to meeting the requirements and ensuring the continuity of ISMS.