İletişim & Talep
Information Security Policy

BURÇELİK recognizes that the confidentiality, integrity, and availability of all forms of information play a critical role in the company’s sustainable success and good governance practices. We are also aware that insufficient levels of information security may lead not only to financial loss but also to reputational damage.

This Information Security Policy outlines BURÇELİK’s approach to Information Security Management and defines the guiding principles and responsibilities required to protect its information systems.

BURÇELİK is committed to establishing, implementing, operating, monitoring, reviewing, maintaining, and continuously improving its Information Security Management System in accordance with the TS ISO/IEC 27001 standard, to ensure the proper protection of the confidentiality, integrity, and availability of all information assets under its control.

At BURÇELİK, we commit to:

  • Monitoring current cyber threats relevant to our operations,

  • Ensuring compliance with contractual obligations and legal requirements,

  • Conducting all activities efficiently, accurately, quickly, and securely,

  • Operating in accordance with industry-specific security standards,

  • Managing all activities with awareness of the risks to confidentiality, availability, and integrity of information assets related to our company, employees, customers, suppliers, and business partners,

  • Making information security and awareness part of our corporate culture,

  • Preparing, implementing, and testing business and service continuity plans,

  • Evaluating and addressing information risks according to accepted risk management methodologies,

  • Collaborating with relevant special interest groups to benefit from evolving technologies and knowledge in our industry.