/ Information Security Policy

NOVACON INFORMATION SECURITY POLICY

As Novacon Bilişim Danışmanlık Ve Dış Tic. Ltd. Şti., while operating in the fields of Oracle NetSuite implementation, integration, development, and consulting, ensuring the security of our clients’ corporate, financial, and operational data is our highest responsibility.

Accordingly, as Novacon Management, we commit to the following principles:

1. Confidentiality, Integrity, and Availability We adopt the following core principles for the information of our corporate clients, business partners (Oracle, digital integrators, etc.), and employees:

• Confidentiality (ensuring information is accessible only to authorized persons),

• Integrity (protecting information against unauthorized modification and ensuring its accuracy),

• Availability (ensuring information is accessible without interruption when needed by authorized users).

2. Legal and Contractual Compliance While conducting our operations, we fully comply with all national and international regulations, especially the Personal Data Protection Law No. 6698 (KVKK), as well as confidentiality agreements (NDAs) signed with our clients.

3. Risk Management and Continuous Improvement We conduct regular risk assessments to proactively identify information security threats such as cyberattacks, data breaches, and system outages. As a provider of cloud-based ERP solutions, we continuously test and update the security of the systems and infrastructures we use.

4. Employee Awareness We are aware that information security starts with people, not technology. We regularly conduct training programs to increase all employees’ awareness of information security and apply a zero-tolerance policy toward security violations.

5. Incident Response In the event of a potential information security breach, we implement a proactive incident response plan to minimize damage, inform our clients and relevant authorities in a timely manner, and perform root cause analysis to prevent recurrence.

As Novacon Bilişim, we declare to all stakeholders that we are committed to continuously improving our information security management system and protecting the reputation of our company and our clients.