{"id":1130,"date":"2021-12-18T12:53:35","date_gmt":"2021-12-18T09:53:35","guid":{"rendered":"https:\/\/www.bigsbilisim.com\/?page_id=1130"},"modified":"2026-06-19T16:43:22","modified_gmt":"2026-06-19T13:43:22","slug":"information-security-policy","status":"publish","type":"page","link":"https:\/\/www.bigsbilisim.com\/tr\/company\/information-security-policy\/","title":{"rendered":"Bilgi G\u00fcvenli\u011fi Politikas\u0131"},"content":{"rendered":"

Bigs Bili\u015fim Information Security Policy<\/h1>\n

Bigs Bili\u015fim Ltd. \u015eti.<\/strong> operates in the information technology industry from its office located at Ak\u00e7aburgaz Mah. 1593. Sokak No:6, Esenyurt, Istanbul, T\u00fcrkiye.<\/p>\n

As an IT services, cloud operations and managed infrastructure company, Bigs Bili\u015fim is committed to protecting the confidentiality, integrity and availability of all physical and digital information assets.<\/p>\n

This Information Security Policy defines our approach to protecting company data, customer information, business systems, operational processes and technology assets.<\/p>\n

Our Information Security Commitment<\/h2>\n

Bigs Bili\u015fim management is committed to maintaining a secure, reliable and compliant working environment. Information security is managed in alignment with our business objectives, legal obligations, customer expectations and operational requirements.<\/p>\n

Our goal is to reduce information security risks to acceptable levels while protecting business continuity, service quality, commercial reputation and customer trust.<\/p>\n

Information Security Management System<\/h2>\n

Bigs Bili\u015fim manages information security through an Information Security Management System (ISMS). The ISMS provides a structured framework for identifying, assessing, managing and monitoring information security risks.<\/p>\n

The ISMS is aligned with the company\u2019s strategic business plan and risk management approach. It supports the protection of information assets and helps ensure that security controls remain effective and relevant.<\/p>\n

Risk Management and Security Controls<\/h2>\n

Information security risks are identified, assessed and controlled through a formal risk management process. Risk assessments, applicability statements and risk treatment plans are used to define how information-related risks are managed.<\/p>\n

The Information Security Manager and IT Manager are responsible for managing the risk treatment process and ensuring that appropriate controls are implemented. Additional risk assessments may be performed when required for specific systems, projects, services or customer environments.<\/p>\n

Key Security Areas<\/h2>\n

Bigs Bili\u015fim focuses on the following key information security areas:<\/p>\n