Information Security Policy
Medoffice Health Industry Inc. adopts information security as one of the fundamental principles of all healthcare services and administrative activities. Our organization is aware that information assets must be managed and protected systematically. In this regard, we are committed to supporting the sustainability and continuous development of information security principles.
Our Core Principles
Medoffice Health Industry Inc. has adopted the following principles:
- Meeting the requirements of ISO/IEC 27001 standards within the scope of Information Security Management System (ISMS)
- Ensuring full compliance with GDPR (Personal Data Protection Law No. 6698) and all other relevant legal regulations
- Identifying, evaluating and systematically managing risks to information assets
- Regularly reviewing information security processes and continuously improving them
- Taking necessary technical and administrative measures to prevent events that may threaten information security
- Responding quickly to possible information security breaches, eliminating their effects and taking preventive measures
- Showing special sensitivity to healthcare sector-specific information security requirements (patient information, medical records, etc.)
- Protecting our corporate reputation and brand value through information security level
- Organizing technical and behavioral trainings to increase our employees' information security awareness
- Creating employee policies to spread information security culture within the organization and ensuring compliance with these policies
Medoffice Health Industry Inc. considers maintaining and continuously improving the current security level with the control infrastructure established for information security as a corporate responsibility.