INTENGO INFORMATION SECURITY POLICY

As Intengo Information Technologies Industry and Trade Inc., we implement the ISO 27001 Information Security Management System in order to ensure the security of our activities related to “E-Auction, E-Procurement and other professional services provided to our customers”, and to keep information under control in terms of confidentiality, integrity, and availability throughout the processes and locations where information assets are used.

Purposes of Processing

As the management of Intengo Information Technologies Industry and Trade Inc., our commitments are as follows:

  • To keep information under control against threats and risks in accordance with the principles of Confidentiality, Integrity, and Availability,
  • To provide the necessary resources, training, and leadership for the implementation of this policy and to communicate the policy to our employees,
  • To ensure that the Information Security Management System is operated and complied with in accordance with the laws and regulations of the Republic of Türkiye, the ISO 27001 ISMS standard, and our policies and procedures,
  • To respond to information security violations, initiating disciplinary procedures when necessary, and to ensure the establishment of the required training, resources, and infrastructure for the monitoring and management of such incidents,
  • To manage our relationships with suppliers and subcontractors by considering their impact on and risks to our information security,
  • To monitor, evaluate, and manage ISMS performance as management, and to ensure the implementation of corrective and improvement actions for the continuous improvement of the Information Security Management System,
  • To address climate change issues and risks within the scope of the Information Security Management System and to adapt activities and controls where necessary,
  • To implement internal controls, conduct internal audits, and ensure the necessary corrective and improvement actions based on their results.