Istanbul Aydın University covers the information assets related to its education–training activities and the information security and business processes used to protect these assets.
Our Information Security Management System ensures that all our activities are carried out in compliance with the ISO 27001:2022 standard within the framework of the following principles:
PRINCIPLES
- Protection of Information: Preserving the availability, integrity, and confidentiality of information.
- Access to Information: Ensuring stakeholders have secure access to information assets.
- Information Security Risk Management: Identifying existing and potential risks to ensure information security, and evaluating and managing them through an effective information security risk management approach.
- Institutional Image: Protecting the institution’s credibility and brand image.
- Information Security Violations: Applying necessary sanctions in the event of information security violations.
- Information Security Requirements: Fulfilling information security requirements arising from applicable national, international, or sectoral regulations, complying with legal and related legislative obligations, meeting contractual requirements, and addressing institutional responsibilities toward internal and external stakeholders.
- Information Security Threats and Sustainability: Reducing the impact of information security threats on business/service continuity and ensuring the continuity and sustainability of operations.
- Maintaining the Level of Information Security: Maintaining and improving the level of information security through the established control infrastructure.