EBIS INFORMATION SECURITY MANAGEMENT SYSTEM POLICY


EBIS is aware that Information Security has a supporting role in achieving our vision and in this sense:

  • Protecting electronic and non-electronic information regarding all its activities,
  • Protecting all kinds of developed applications, codes, code snippets, reports, all information assets in the internal processes of EBIS and the security measures management system used for these assets,
  • Protecting physical and electronic information assets related to activities in the fields of consultancy, software and product development, purchasing, sales and marketing, information technologies, human resources and financial affairs, and implementing the information security management system, which includes all security measures used to protect these assets.

EBIS, perceives information security as the protection of the following basic features of information assets.

  • Confidentiality: Information should only be accessible by authorized persons,
  • Integrity: Protecting information from unauthorized changes and being aware when it is changed,
  • Availability: Making information available to authorized users whenever needed.

EBIS, for this purpose:

  • Ensures the security of both its own information assets and those shared with us by our stakeholders within the scope of EBIS business processes,
  • identifies, evaluates, eliminates, and continuously improves possible risks on information assets,
  • manages our information assets and measures process performances in line with the principles of confidentiality, integrity, accessibility, and sustainability,
  • minimizes any interruptions that may occur due to information security in all our business processes and activities within the scope,
  • reports all real or potential violations, to detect the nonconformities that cause the violation and to take measures to prevent their recurrence,
  • provides necessary and qualified training to all relevant process owners and employees in order to ensure and increase information security awareness,
  • aim to carry out our ISMS activities in accordance with all legal requirements regarding information security, current standards and the agreements made with 3rd parties (business partners, customers, suppliers).

You can contact us via our e-mail address incident@ebis.com.de for any security violations.

EBIS
First Publication: 01/09/2023
Revision No:01

Managing Director
Ozan Suarık