Information Security Policy

In our activities as a provider of internet access services at BaseFIX;

WITHIN THE FRAMEWORK OF THE TS EN ISO/IEC 27001:2022 INFORMATION SECURITY MANAGEMENT SYSTEM;

BaseFIX attaches great importance to ensuring the security of all its corporate operations and its network infrastructure, so that it can provide its services to its stakeholders in the best way and deliver the greatest benefit.

In the field of electronic communications / internet service provision in which it operates, BaseFIX aims to ensure information security and service continuity in the services it provides to all relevant parties, with an effective and high-quality approach to service, by acting in accordance with the law and with legal, regulatory or contractual obligations (including BTK, the Personal Data Protection Law No. 6698 (KVKK) and Law No. 5651). With this sense of responsibility, the requirements of the ISO/IEC 27001 Information Security Management System, an international standard, are applied meticulously within BaseFIX.

Our core information security objectives at BaseFIX are:

• To protect our reputation and brand value in the eyes of our employees, customers, suppliers and the public,
• To manage the information risks relating to customer data and the network infrastructure,
• To meet the information security requirements of the services provided,
• To ensure that all business processes are integrated, consistent and balanced with one another,
• To comply with all legislation relating to information security (BTK, KVKK, Law No. 5651) and with the contracts made with third parties (business partners, customers, suppliers),
• To prevent interruptions that may occur in the network infrastructure and in critical business processes, to keep the service continuously available and, should an interruption occur, to become operational again within the targeted recovery time,
• To minimise the damage that may arise from information security incidents by managing information security effectively,
• To increase the professional competences needed to maintain the Information Security Management System effectively,
• To reduce the likelihood of an information security breach and, should one occur, to be able to respond in a coordinated way,
• To ensure the confidentiality, integrity and availability of the information assets of our customers and employees within the scope of the Information Security Management System,
• To ensure the continual improvement of the Information Security Management System.

This policy was prepared with the contribution of the relevant unit managers and employees and approved by the General Manager, İsmail Hakan Altınkaya (Management Representative).