As GÜLTAŞ YAZILIM HARİTA SANAYİ TİCARET LİMİTED ŞİRKETİ, we regard information security as one of our corporate priorities in the software development, geographic information systems, data management, digital archiving, consulting and other information technology activities we carry out under our ODAKGIS brand.
We consider protecting the information of our customers, employees, business partners and other interested parties, and ensuring the reliability and continuity of our services, to be among our core responsibilities.
Accordingly, we commit to the following principles within our Information Security Management System (ISMS) based on the ISO/IEC 27001:2022 standard.
Our Information Security Commitments
01 Confidentiality, Integrity and Availability of Information
We commit to protecting the confidentiality, integrity and availability of our information assets and to applying appropriate security measures against unauthorized access, modification, disclosure, loss and disruption.
02 Information Security Risk Management
We aim to systematically identify, assess and manage internal and external threats, vulnerabilities and risks that may affect our information assets, keeping them at acceptable levels.
03 Compliance with Legal and Contractual Obligations
We commit to complying with the legal, regulatory and contractual information security obligations that apply to our activities, in particular personal data protection and intellectual property rights.
04 Secure Software Development and Data Protection
We take information security requirements into account in our software development, testing, maintenance and data management processes, and apply appropriate technical and organizational controls to protect customer data, source code and corporate information.
05 Access Control and Authorization
We aim to control access to information systems and information assets in line with business requirements and authorization principles, and to prevent unauthorized access.
06 Business Continuity and Incident Management
We commit to establishing the processes needed to report, assess and manage information security incidents in a timely manner, and to planning and regularly testing business continuity and recovery measures that reduce the impact of possible disruptions.
07 Employee Awareness
We aim to ensure that all our employees know their information security responsibilities and to develop an information security culture through regular awareness and training activities.
08 Supplier and Business Partner Security
We commit to considering information security requirements in our work with suppliers and business partners, and to sharing information in line with appropriate security and confidentiality principles.
09 Information Security Objectives and Performance Monitoring
We set information security objectives that are consistent with our policy, trackable and measurable where possible; we provide the resources needed to achieve them and regularly evaluate performance.
10 Continual Improvement
We commit to regularly reviewing the effectiveness of our Information Security Management System, considering internal audit and performance evaluation results, addressing nonconformities and continually improving our system.
Management Commitment
The top management of GÜLTAŞ YAZILIM HARİTA SANAYİ TİCARET LİMİTED ŞİRKETİ commits to supporting the implementation of the information security policy, defining the necessary responsibilities and maintaining the effectiveness of the Information Security Management System.
This policy is communicated to our employees, made available to interested parties as appropriate, and reviewed regularly in line with changing needs and information security requirements.
GÜLTAŞ YAZILIM HARİTA SANAYİ TİCARET LİMİTED ŞİRKETİ