Özyeğin University is committed to meeting information security requirements arising from applicable national, international, and sector-specific regulations, relevant legislation and standards, contractual obligations, and its corporate responsibilities to internal and external stakeholders.

In order to achieve this strategic objective, the University hereby undertakes to ensure information security, protect information assets, meet information security requirements and expectations in accordance with applicable requirements and international standards, systematically manage risks to improve information security performance, maintain infrastructure and operational security, and require all employees to comply with the University’s Information Security Policies and Procedures.

To this end, Özyeğin University implements its Information Security Management System (ISMS) across all departments and processes.

As Özyeğin University, our primary objectives for Information Security are follows:

• Comply with all applicable information security laws and regulations, internal policies and procedures, and contractual obligations to third parties, including business partners and suppliers.
• Ensure compliance with the Law on the Protection of Personal Data and the Information and Communication Security Guide issued by the Cybersecurity Directorate.
• Allocate the resources necessary to establish, operate, and continuously improve our Information Security Management System (ISMS) in accordance with the requirements of the TS ISO/IEC 27001 standard.
• Adopt a sustainable management approach to information security that takes into account the risks and impacts of climate change.
• Ensure that exemptions and exceptions pertaining to information security policies, procedures, and controls are duly managed and documented with the approval of the relevant authorities, following an assessment of their rationale, scope, duration, and potential risks.
• Define information security management roles and responsibilities, assign them to the appropriate individuals and units in accordance with their authority and duties, and ensure that they are effectively carried out.
• Maintain the confidentiality, integrity, and authorized accessibility of the University’s information assets as required by the Information Security Management System.
• Provide employees, students, suppliers, and other stakeholders with secure access to information assets.
• Assess and manage potential risks to the information assets of our University and its stakeholders.
• Minimize the impact of information security threats on business and service continuity and ensure business continuity and sustainability,
• Provide training to develop the skills and competencies needed to raise information security awareness.
• Maintain our University’s reputation and brand value in the eyes of our employees, students, suppliers, and the public.
• Ensure that all business processes are integrated, aligned, and balanced.
• Undergo internal and independent third-party audits to verify that the University’s information security practices comply with applicable laws and standards.
• Effectively manage information security to minimize potential damages arising from information security issues.
• Reduce the likelihood of information security breaches, provide a coordinated response in case of any actual breach, and ensure the continuous improvement of the Information Security Management System.

We expect all our employees, students and suppliers to meet the requirements of the Information Security Management System in accordance with these objectives and, in doing so, contribute to the University's relevant processes with the utmost care and diligence.