Information Security Policy
At ASBİLEK, ensuring the security of information used across all business processes—from production to management—is a cornerstone of our corporate sustainability and stakeholder trust. Information security is not only achieved through technical measures, but also as a culture, a system, and a commitment embedded in our core values.
In this regard, ASBİLEK is committed to implementing the following principles with all employees to ensure information security:
1. Confidentiality
Information should only be accessible to authorized individuals and must be protected from unauthorized access. ASBİLEK treats all corporate data—including customer information, trade secrets, technical documentation, and financial data—as confidential and protects it accordingly.
2. Integrity
Ensuring the accuracy, completeness, and protection of information from unauthorized modifications is essential. Physical and digital security measures are taken to prevent data loss or unauthorized changes, including logging and backup systems.
3. Availability
Within the scope of business continuity, information must not only be secure but also accessible when needed. Emergency and disaster recovery plans are prepared for scenarios such as system outages, cyberattacks, or natural disasters.
Policy Commitments
- We create an inventory of information assets and regularly conduct risk analyses.
- We organize periodic training and awareness programs to instill information security awareness in all our employees.
- We expect our business partners, suppliers, and subcontractors to comply with information security rules.
- We use up-to-date technical protection systems against unauthorized access, data leaks, malware, phishing, and other cyber threats.
- We implement rules and controls regarding email use, internet access, device security, and portable media policies.
- We define disciplinary processes for policy violations and carry out necessary legal procedures.
- We establish information security objectives and monitor the achievement of these goals with performance indicators.
- This policy applies to all departments of ASBİLEK, and to all employees, contractors, and business partners. It is executed under the principle of shared responsibility for information security.
General Manager
ASBİLEK