POSEIDON HOTEL
INFORMATION SECURITY POLICY
Within the scope of our innovative tourism mentality, we hereby undertake the following to constantly improve and develop the information security management system that we carry out in order to protect all information assets:
- To determine risk acceptance criteria and the risks, develop and apply controls,
- To ensure that information security risk assessment process is performed to detect the risks regarding confidentiality, integrity and accessibility within the scope of information security management system,
- To define a framework regarding evaluation of the confidentiality, integrity, accessibility effects of information within the scope of information security management system,
- To review the technological expectations in terms of the concept provided and monitor the risks constantly,
- To fulfil the information security requirements arising from corporate responsibilities against internal and external stakeholders, meeting the contractual obligations, fulfilling the legal and relevant legislation requirements stipulated in the national or sectoral regulations.
- To minimize the impact of information security threats on service continuity and contribute to the sustainability,
- To be able to respond quickly to information security incidents that may occur and to minimize the impact of the incident,
- To maintain and improve the information security level over time with a cost-effective control infrastructure,
- To improve the corporate reputation and protect the company from information security borne negative effects,
- To increase the corporate awareness on sensitive information at different levels in terms of confidentiality within the scope of information security, determine logical, physical and administrative controls proposed to apply for information with different sensitivity levels and define storage and disposal rules for the data in portable devices,
- To disseminate all these efforts in our relationships with our customers, suppliers, employees and all other stakeholders.