With this policy, Gürpınar Water is committed to managing all types of risks related to our information security and information assets by:
- Considering corporate information, as well as data belonging to employees, customers (financial data, personal information, etc.), donors, volunteers, and beneficiaries with whom we interact, as valuable and critical; and fulfilling all obligations required by applicable information security laws,
- Preserving the reliability and reputation of the institution,
- Ensuring the uninterrupted continuity of IT services used in the execution of corporate activities, and providing the necessary infrastructure and security measures so that access to personal and private data is granted only to authorized individuals,
- Documenting and continuously improving our Information Security Management System in compliance with the requirements of the ISO/IEC 27001 standard,
- Complying with all relevant legal regulations and contractual requirements regarding information security,
- Systematically managing risks to information assets,
- Conducting training to enhance technical and behavioral competencies to raise awareness of information security.
We hereby commit to the above.