BYGS (ISMS) Policy

Mayatech processes data in line with the principles of the current ISO 27001 standard. The central theme of our Information Security Management System is to ensure support, classification, incentive, registration, audit, monitoring and archiving activities for the sector the organization serves. These activities demonstrate that information security management is provided across people, infrastructure, software, hardware, citizen information, organizational information, third-party information and financial resources — to manage risk, measure the performance of information security management, and evaluate information security, including the regulation of relations with third parties on related matters.

The purpose of our ISMS Policy

• Managing information assets; determining the security values, needs and risks of investments; and developing and implementing controls for security risks.
• Defining the framework for determining information assets, values, security needs, vulnerabilities, threats and threat frequency.
• Defining a framework for assessing the effects of confidentiality, integrity and accessibility on assets.
• Establishing working principles for processing risks, and continuously monitoring risks by reviewing technological expectations within the scope of service.
• Meeting information security requirements arising from national and international regulations, fulfilling legal criteria and contractual obligations, and corporate responsibilities toward internal and external stakeholders.
• Reducing the impact of information security threats on service continuity and contributing to continuity.
• Having the competence to respond quickly to information security incidents and to minimize their impact.
• Protecting and improving the level of information security over time with an optimum cost-control infrastructure.
• Improving the institution's reputation and increasing personnel awareness regarding the ISMS.