INFORMATION SECURITY MANAGEMENT SYSTEM POLICY
Nizip Commodity Exchange (Exchange or Our Stock Exchange) Management emphasizes the importance and need to implement security measures to protect the information under the responsibility of the organization. It is essential that necessary precautions are taken to ensure that top secret and confidential stock exchange information is made available to authorized users. The level of security that can be achieved through technical means is limited, so it must be supported by appropriate management, workflows and procedures.
Our Stock Exchange defines the protection of the confidentiality, integrity and accessibility of information assets and information systems as "Information Security Management System". To protect information assets, confidentiality, integrity and accessibility assessments are made on each asset.
Confidentiality: It means that information can only be accessed by authorized persons. Integrity: It refers to the protection of information against changes that would negatively affect its accuracy and completeness. Accessibility: It refers to the availability of information to authorized users when necessary.
Confidentiality, integrity and accessibility of information are one of the main objectives of Borsa İstanbul's ISMS. In order to achieve the targeted ISMS results , Borsa Management ensures compliance with the ISO 27001 Information Security Management Standard. All business units and relevant parties in our Stock Exchange will pay attention to these principles in their activities.
All Borsa personnel and third party personnel, at all levels, fulfill information security system requirements and carry out activities to increase the effectiveness of the system. It aims to secure the confidentiality, integrity and accessibility of information belonging to our members, personnel, suppliers or other third parties, especially the information assets of our Borsa , and to protect it from unauthorized access.
Stock Exchange Management ensures continuous improvement and business continuity in terms of Information Security Management System.
By initiating judicial and administrative legal proceedings against personnel or third parties who violate the rules and processes established within the Scope of Information Security; action may be taken and/or one or more provisions of the sanctions contained in the relevant contracts may be applied.