×
TR EN
BOARD AND COMMISSION DUTIES

        ISMS MEMBERS TASK DEFINITIONS

  • Approving ISMS documents under their responsibility (See. ISMS Document Approval Mechanism)
  • Ensuring the implementation of policies and procedures related to supplier relations
  • Informing the management on matters within the scope of the Board's agenda
  • To ensure that actions are taken regarding the outputs of the board within its mandate
  • Approving ISMS documents under its responsibility (See. ISMS Document Approval Mechanism)
  • Ensuring the implementation of policies and procedures related to physical security
  • Informing the management on matters within the scope of the Board's agenda
  • To ensure that actions are taken regarding the outputs of the board within its mandate
  • Approving ISMS documents under its responsibility (See. ISMS Document Approval Mechanism)
  • Ensuring the implementation of policies and procedures related to legal and compliance issues
  • Ensuring compliance with legal and regulatory requirements
  • Informing the management on matters within the scope of its duty in the agenda of the Board
  • Ensuring that actions are taken regarding the outputs of the board within its duty
  • Informing the management about the ISMS studies carried out
  • Approving ISMS documents under its responsibility (See. ISMS Document Approval Mechanism)
  • Informing the committee about the performance of ISMS
  • Informing all units related to information security studies within the organization and following the studies
  • Ensuring the implementation of information security policies and procedures with unit representatives
  • Evaluating experienced or potential information security incidents with units
  • Carrying out studies on the implementation of IT-related information security policies and procedures
  • Taking the necessary measures to manage and maintain the security of information systems
  • Participating in planned internal audits and making the necessary contribution
  • Suggest improvements to existing processes
  • Reporting information security incidents within the unit