Information Security Policy

At BAYKAN DENİM, ensuring the security of our information assets and the information belonging to our customers is one of our fundamental responsibilities. To this end, we are committed to:

• Protecting the confidentiality, integrity, and availability of our information assets;
• Systematically identifying, assessing, and managing information security risks at an acceptable level;
• Implementing physical, technical, and administrative security controls appropriate to the value of the information and its associated level of risk;
• Authorizing access to information in accordance with the “need to know” and “least privilege” principles and preventing unauthorized access;
• Carrying out the necessary protection and monitoring activities against malware, cyber threats, and other information security threats;
• Ensuring that information security incidents are detected, reported, assessed, and managed in a timely and effective manner;
• Taking the information security measures required to support the continuity of our business processes and information technology infrastructure;
• Complying with legal, regulatory, contractual, and other applicable requirements related to information security;
• Conducting the necessary training and awareness activities to enhance the information security awareness and competence of our employees;
• Taking information security requirements into account in our engagements with suppliers, service providers, and other relevant parties;
• Continuously monitoring, evaluating, and improving the performance of our Information Security Management System (ISMS).

This policy sets out BAYKAN DENİM’s approach to information security and the fundamental principles it adopts. All employees, and all relevant parties associated with the ISMS within the scope of their duties, are obliged to fully comply with the information security policies, procedures, instructions, and rules applicable to them.