Information Security Policy
The Turkish Ship, Yacht and Services Exporters' Association (GYHİB) is committed to protecting the confidentiality, integrity, and availability of corporate information assets in accordance with international standards and legal regulations.
Core Security Pillars
Our Information Security Management System (ISMS) is built on four core pillars in full compliance with the ISO/IEC 27001 standard.
Confidentiality
Ensuring that all sensitive corporate and member information is strictly protected against unauthorized access, disclosure, and use, accessible only by authorized personnel.
Integrity
Safeguarding the accuracy, completeness, and protection against unauthorized modification of information across its entire lifecycle from creation to archiving.
Availability
Guaranteeing that authorized stakeholders and members have continuous, resilient, and secure access to critical information systems and services whenever required.
Regulatory Compliance
Strict adherence to all applicable national and international regulatory requirements, including the Personal Data Protection Law (KVKK) and cybersecurity mandates.
Information Security Management Principles
Within the scope of our IT infrastructure, member databases, and sectoral communication platforms, GYHİB adheres to the following principles:
Continuous Risk Assessment
Information security risks are systematically analyzed on a periodic basis, with appropriate technical and administrative controls implemented to maintain acceptable risk thresholds.
Business Continuity and Crisis Response
Maintaining comprehensive disaster recovery, redundancy, and business continuity frameworks to ensure uninterrupted operations during cyber incidents or disasters.
Human Resource Awareness & Training
Conducting continuous awareness programs, simulations, and specialized training for employees, trainees, and partners to cultivate a robust security culture.
Incident and Breach Management
Rapid identification, reporting, and containment of security incidents and anomalies, backed by root-cause analysis to prevent recurrence.
Third-Party & Vendor Security
Requiring all service providers and contractors with system or data access to comply strictly with GYHİB security protocols and non-disclosure agreements.
Continual Improvement
Regular internal and external audits conducted in accordance with ISO/IEC 27001 to refine and adapt security controls against evolving cyber threats.
Regulatory Framework & Standards
- ISO/IEC 27001:2022 Information Security Management System Standard
- Law No. 6698 on the Protection of Personal Data (KVKK)
- Law No. 5651 on the Regulation of Broadcasts on the Internet
- Information and Communication Security Guidelines of the Digital Transformation Office
- Turkish Exporters Assembly (TIM) and IIB Information Security Directives
Security Reporting & Contact
If you detect any security vulnerabilities, suspicious communications, potential data breaches, or have inquiries regarding our security policies, please contact our team immediately.
Çobançeşme Mevkii Sanayi Cad. Dış Ticaret Kompleksi C Blok Yenibosna / Bahçelievler / Istanbul