Kolay İK Contracts & Policies

Integrated Management System Policy

Download Document

‘Ensuring Information Security and the Security of Personal Data in the Development, Sale and Support of Human Resources Software Processes’ In all its activities, it places customer satisfaction at the forefront, and pays the utmost attention to the environment, human health, information security, the protection of personal data and quality. It aims to understand regulations, standards, and customer expectations and needs, and to develop projects that anticipate future needs and expectations.

In this regard,
‍
‍OUR POLICY;
To manage information assets, identify the security value, requirements and risks of assets, and develop and implement controls for security risks.
‍
To define the framework for methods to identify information assets, their values, security requirements, vulnerabilities, threats to assets, and the frequency of those threats.
‍
To define a framework for assessing the confidentiality, integrity and availability impact of threats on assets.
‍
To establish the principles for treating risks.
‍
To continuously monitor risks by reviewing technological expectations within the context of the services provided.
‍
To meet information security requirements arising from applicable national or international regulations, legal and regulatory obligations, contractual commitments, and corporate responsibilities towards internal and external stakeholders.
‍
To minimise the impact of information security threats on service continuity and contribute to that continuity.
To have the capability to respond swiftly to information security incidents and minimise their impact.
‍
To maintain and improve the level of information security over time through a cost-effective control infrastructure.
‍
To provide all staff with awareness, information and training on the Information Security Management System Policy, Processes and related topics, and to repeat this training at regular intervals.
‍
To continuously improve the system by taking into account the results of implementation, audits and corrective actions within the scope of the Information Security Management System.
‍
To operate the Information Security Management System in an integrated manner alongside other management systems within the company.
‍
To work towards understanding and meeting the requirements of personal data protection legislation.
‍
To enhance the company’s reputation and protect it from information security-related adverse impacts.


As KOLAY YAZILIM A.Ş., we commit to the implementation, review and continuous improvement of practices related to the Integrated Management System.
Entegre Yönetim Sistemi ile ilgili uygulamaların gerçekleşmesini, gözden geçirilmesini ve sürekli iyileştirilmesini taahhüt ederiz.

CEO
‍Çağlar Yalı