ONE HUMAN SOFTWARE AND INFORMATION TECHNOLOGY CONSULTING INDUSTRY AND TRADE INC.

In its activities of “Developing, Consulting, Selling, and Providing Support Services for Artificial Intelligence-Based Human Resources Business Applications Software,” always prioritizes customer satisfaction, pays utmost attention to information security, personal data protection, and quality, and aims to understand applicable legislation, standards, customer expectations and needs, as well as to develop projects that anticipate potential future requirements.

In this context,

OUR POLICY IS TO:

• Manage information assets by identifying their security value, requirements, and risks, and to develop and implement controls for security risks,
• Define a framework for identifying the values of information assets, their security requirements, vulnerabilities, threats, and the frequency of such threats,
• Establish a framework to assess the impact of threats on confidentiality, integrity, and availability of processes and assets, as well as on the confidentiality of personal data,
• Set principles for processing risks,
• Continuously monitor risks by reviewing technological expectations within the service scope,
• Fulfill the requirements of applicable national and international regulations, relevant legal frameworks, contractual obligations, and the information security needs arising from responsibilities toward internal and external stakeholders,
• Minimize the impact of information security threats on business continuity and contribute to sustainability,
• Possess the competence to respond rapidly to any information security incidents and minimize their impact,
• Maintain and improve the level of information security over time through a cost-effective control infrastructure,
• Provide all personnel with awareness, training, and education on the Information Security Management System policy and processes, and repeat such training at regular intervals,
• Continuously improve the system by considering the implementation, audit, and corrective action results within the Information Security Management System,
• Work to understand and meet the requirements of the Personal Data Protection Law (KVKK); additionally, to understand and comply with the General Data Protection Regulation (GDPR) requirements when working with international stakeholders and partners subject to EU data protection laws,
• Enhance the company’s reputation and protect it from negative impacts based on information security.

As ONE HUMAN SOFTWARE AND INFORMATION TECHNOLOGY CONSULTING INDUSTRY AND TRADE INC., we commit to ensuring the implementation, review, and continuous improvement of practices related to the Information Security Management System.

General Manager
03.01.2025