INFORMATION SECURITY POLICY
To comply with all legal and contractual requirements, manage risks, measure Information Security Management System performance, ensure the uninterrupted continuity of activities supporting electricity production, and address information security requirements arising from corporate responsibilities toward internal and external stakeholders, in accordance with the applicable standard;
- To protect Information Technology information assets against all kinds of threats that may occur from inside and/or outside, knowingly or unknowingly, to ensure access to information as necessary through business processes, to meet the requirements of legal legislation, to carry out studies aimed at continuous improvement,
- To ensure the continuity of the three basic elements of the Information Security Management System in an effective, accurate, fast and secure manner in all activities carried out: Privacy: Preventing unauthorized access to sensitive information. Integrity: Demonstrating that the accuracy and completeness of the information is ensured. Accessibility: Demonstrating the availability of information to authorized persons when necessary.
- To take care of the security of not only the data stored in electronic environment in an effective, accurate, fast and secure way in all the activities carried out; but also all the data in written, printed, oral and similar media,
- To raise awareness by providing Information Security Management training to all personnel,
- To report all openings in Information Security that actually exist or raise doubts to the Information Security Team and to ensure that they are investigated by the team,
- Preparing, maintaining and testing business continuity plans,
- To identify the existing risks by conducting periodic evaluations on Information Security; to review and follow up action plans as a result of the evaluations,
- To prevent any disputes or conflicts of interest that may arise from Confidentiality Agreements,
- To ensure accessibility to information and to meet business requirements for information systems.