Information Security

ENPAY aims to ensure the protection of corporate information in terms of confidentiality, integrity, and availability, to maintain business continuity, and to minimize the risks arising from security breaches through the ISO 27001 Information Security Management System standard. For this purpose, we are committed to:

• Establishing documentation, obtaining certification, defining responsibilities, making necessary assignments, maintaining and improving the effectiveness, and continuously enhancing the Information Security Management System in accordance with the ISO 27001 standard,
• Complying with all relevant legal regulations and contractual requirements related to information security,
• Fulfilling the legal requirements of the Personal Data Protection Law,
• Identifying risks to information security assets, developing and implementing controls against these risks,
• Granting access to information only within the scope of authorization and taking precautions against unauthorized use, disclosure, and damage of all information assets,
• Initiating relevant processes in case of violations, monitoring the processes, applying disciplinary actions if necessary, and learning from incidents,
• Following innovations in information security technologies and developing solutions accordingly,
• Minimizing all types of income or opportunity loss arising from security incidents,
• Ensuring security, access, and authorization arrangements for physical and environmental areas included in the information security management system,
• Developing, maintaining, and testing Business Continuity Plans,
• Conducting training to increase information security awareness and to improve technical and behavioral competencies,
• Ensuring the confidentiality of stakeholder information assets under the ISMS and taking necessary measures to ensure all stakeholders comply with information security requirements.