Bulutistan is responsible for meeting the "Information Security" requirements for its employees, partners and suppliers, both for its own services and information assets and for ensuring the confidentiality, integrity and availability of its customers' information assets.

• To ensure the confidentiality of information accessed, used and disclosed,
• Ensure Business Continuity,
• Prevent or minimize the impact of security breaches that may occur,
• To prevent access by unauthorized persons who may try to disrupt the confidentiality and integrity of the information,
• Prepare, maintain and test business continuity plans to ensure accessibility of information,
• To meet legal and regulatory requirements,
• To provide regular trainings to all Bulutistan employees to increase information security awareness and consciousness,
• Ensure that all existing or suspected vulnerabilities in information security are reported and develop practices to initiate the process for investigation,
• To prepare corporate risk analysis,
• To determine the measures to be taken in accordance with the risk analysis,
• Identify tasks, roles and responsibilities for employees,
• Define security processes and ensure their implementation,
• Prepare the policies needed for security expectations and ensure their implementation,
• Bulutistan is committed to improving the Information Security management system implemented within its organization.

The Information Security Officer is responsible for ensuring Information Security, all managers are responsible for realizing Information Security in their business areas, the senior management of our Company is responsible for the implementation of the Information Security Policy by reviewing it at least once a year and guarantees compliance with its requirements.