Our ISO 27001 Certificates

1. Purpose

Our Information Security Policy aims to ensure the business continuity of Delta Yazılım Hizmetleri ve Tic. Ltd. Şti. by preventing information security incidents or minimising the risk of damage, thereby reducing the impact of potential threats.

To this end, an Information Security Management System has been established with the aim of complying with ISO 27001:2022.

2. Scope

The scope of Delta Yazılım Hizmetleri ve Tic. Ltd. Şti. covers the management of software development, sales and marketing, training and consultancy services, and after-sales support activities.

3. Responsibility

Within this scope, the Information Security Board is responsible for keeping risks to the company's information assets at an acceptable level approved by senior management.

4. Policy

• This policy aims to protect the company's information assets against internal and external threats, whether intentional or unintentional.
• The Board of Directors of Delta Yazılım Hizmetleri ve Tic. Ltd. Şti. has approved this policy.
• The Information Security Policy meets all the following requirements:
  • Identify processes and information assets, and methodically assess the associated risks;
  • Protect information from unauthorised access;
  • Ensure the integrity of information;
  • Preserve the availability of information;
  • Ensure information is accessible when business processes require it;
  • Meet statutory and contractual legal obligations;
  • Develop and improve business continuity plans;
  • Provide training and awareness activities;
  • Ensure all information security breaches and vulnerabilities are reported to and investigated by the Information Security Board.
• This policy defines the binding commitments made by senior management to information security.
• Information security is provided in line with business requirements.
• The Information Security Management Committee evaluates the effectiveness of this policy, makes recommendations and ensures its continual improvement.
• All managers and employees are responsible for this policy and its associated procedures and instructions.
• The Information Security Policy is a documented policy.

Management Commitment

As management, we declare our support for implementing and monitoring the Information Security Policy and enforcing the necessary sanctions in the event of security breaches.