• To identify risk acceptance criteria and risks, and to develop and implement controls.
• To ensure the implementation of an information security risk assessment process to identify risks related to confidentiality, integrity, and availability of information within the scope of the information security management system, and to identify risk stakeholders.
• To define a framework for evaluating the confidentiality, integrity, and availability impacts of information within the scope of an information security management system.
• Continuously monitoring risks by reviewing technological expectations within the context of the services provided.
• To meet information security requirements stemming from national or sectoral regulations, legal and relevant legislation, obligations arising from agreements, and corporate responsibilities towards internal and external stakeholders.
• To mitigate the impact of information security threats to service continuity and to contribute to continuity.
• Having the competence to respond quickly to potential information security incidents and minimize their impact.
• To maintain and improve the level of information security over time with a cost-effective control infrastructure.
• To improve the company's reputation and protect it from negative impacts based on information security.

Within the scope of information security, Minerva Software has created an information classification guide to increase corporate awareness regarding information with different levels of sensitivity, to identify and implement recommended logical, physical, and administrative controls for information with varying sensitivity levels, and to define storage and destruction rules for data located on portable media.

Minerva Software's Senior Management is committed to the implementation, review, and continuous improvement of Information Security practices.

Contact Us

Please contact us with any questions or comments regarding our Information Security Policy!