Information Security Management Policy

BOREAS TEKNOLOJİ VE ENDÜSTRİ SANAYİ TİCARET A.Ş. is committed to protecting the reputation, image, brand value, and reliability of its stakeholders in all activities related to the production of air handling units, central air conditioning devices, and specially designed equipment for data centers. To achieve this, we pledge to:

• Handle our information assets within the framework of confidentiality, integrity, and availability to ensure business continuity in our processes and evaluate risks, including opportunities, in this context,
• Structure our Information Security Management System (ISMS) in compliance with the ISO/IEC 27001:2022 Information Security Management System standard by establishing, reviewing, and continuously improving records and documentation,
• Ensure that our operations comply with primary and secondary legal regulations, contractual obligations, standards, and business processes, with a priority on legal requirements,
• Define roles, duties, and responsibilities clearly within the framework of ISO/IEC 27001:2022 Information Security Management System standards and ISMS implementation requirements and provide the necessary resources,
• Conduct regular training sessions to raise information security awareness among our employees and utilize all our resources efficiently and effectively for this purpose,
• Encourage our suppliers and business partners to comply with information security requirements,
• Continuously monitor cyber risks that threaten information security and establish an effective incident management and response process for potential security incidents,
• Regularly assess information security risks and continuously update preventive and corrective measures to adapt to the evolving threat landscape,
• Clearly express our expectation that all employees comply with information security requirements and take personal responsibility in this regard.

We are committed to these principles as part of our dedication to maintaining a robust and resilient information security management system.