The Company Information Security Policy:

Ensures the confidentiality of customer and employee information to protect the privacy of personal information.
Implements infrastructure and controls that ensure information integrity and guarantee continuous accessibility.
Ensures role-based authorization following the principle of segregation of duties in design, development, testing, and deployment processes and establishes an approval mechanism for critical operations.
Ensures the physical and/or logical separation of Development, Testing, and Production environments.
Ensures the principle of minimum necessary authorization in user authorization and ensures regular control of authorizations.
Establishes network security against potential threats from external networks.
Establishes a layered security architecture and ensures its continuous monitoring.
Uses techniques to verify that the company provides the service through its website.
Ensures the implementation of security measures such as encryption and masking in transmitting and storing personal information.
Creates an information security organization to manage and coordinate information security activities.
Defines information security requirements in the procurement processes required for carrying out insurance activities and ensures supplier compliance.
Creates an inventory of information assets, determines ownership, and manages the risks associated with those assets.
Conducts information security incident management activities that include detecting, reporting, and preventing the recurrence of information security incidents.
Adequately applies an awareness program to all employees and ensures the participation of all staff in meeting information security requirements.
Takes the necessary physical and environmental security measures to ensure information security in areas where information is processed.
Identifies and implements security requirements in acquiring, developing, and maintaining information systems.
Requires employees to comply with the established information security policies, processes, and legal and regulatory requirements by obtaining written commitments.
Provides services that comply with all relevant legal regulations and contracts related to information security without interruption and as quickly as possible.
Ensures that resources are allocated, established, operated, and continuously improved to meet the requirements of the TS ISO/IEC 27001 Information Security Management System (ISMS) standard. This ensures the protection of the institution's reliability and reputation.
Carries out business continuity activities to prevent interruptions in business operations and ensure continuous access to information.
Conducts internal audits and audits by independent third-party institutions to ensure compliance of the information security efforts with laws and standards.