/ Information Security Policy

Information Security Policy

Information Security Policy

NOVACON BİLİŞİM DANIŞMANLIK VE DIŞ TİC. LTD. ŞTİ.

INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS) POLICY

1. Purpose and Scope

As Novacon Bilişim Danışmanlık ve Dış Tic. Ltd. Şti., we consider protecting the confidentiality, integrity and availability of the information assets belonging to both our company and our customers as our highest priority in the software development, cloud solutions and technology consulting services we provide.

This policy covers our software development processes, source code, server and cloud infrastructure, customer data, and the information security responsibilities of our employees.

2. Core ISMS Principles

In ensuring information security in line with ISO/IEC 27001 standards, we adhere to the following principles:

  • Confidentiality: Ensuring that our customers’ trade secrets, source code and personal data are accessible only to authorized persons.

  • Integrity: Preventing unauthorized or accidental modification or corruption of software code, databases and corporate data.

  • Availability: Ensuring that the applications, systems and infrastructure through which we deliver our services operate securely and without interruption.

3. Software and Technology Focused Commitments

In line with the requirements of the software industry, our information security commitments are as follows:

  • Security by Design: Integrating security principles into every stage of our software development life cycle (SDLC) and producing software that complies with secure coding standards.

  • Source Code and Data Security: Protecting the source code, databases and intellectual property rights of our customers and our company on high-security infrastructure.

  • Legal and Contractual Compliance: Fully complying with all applicable national and international regulations, primarily the Turkish Personal Data Protection Law (KVKK) and the GDPR, as well as the Non-Disclosure Agreements (NDAs) we have signed with our customers.

  • Risk Management and Cyber Resilience: Regularly analyzing risks in our IT infrastructure and software processes, and identifying vulnerabilities through penetration tests (pen-tests) to reduce them to an acceptable level.

  • Business Continuity and Disaster Recovery: Implementing robust backup and disaster recovery scenarios to ensure our services are not disrupted in the event of a cyber attack, system failure or data loss.

  • Supplier and Cloud Security: Auditing the compliance of the cloud service providers we work with, as well as third-party libraries and software, with our security standards.

  • Continuous Training and Awareness: Continuously raising the awareness of all our software development, testing and operations teams regarding current cyber security threats and secure coding practices.

4. Management Commitment and Improvement

As the Senior Management of Novacon Bilişim Danışmanlık ve Dış Tic. Ltd. Şti., we declare that we will provide all the financial, technical and human resources necessary for the establishment, implementation, monitoring and continual improvement of the ISMS. This policy is binding for all our employees and business partners.

NOVACON BİLİŞİM DAN. VE DIŞ TİC. LTD. ŞTİ. BOARD OF DIRECTORS

Effective Date: 01.01.2026
Revision No / Date: 00 / 01.01.2026

Cookie Policy
This website uses cookies to improve your experience and provide you with better service. Cookies are small data files stored in your browser by the websites you visit. These files help us remember your preferences and make the site more functional for you. You can accept cookies to continue.