Providing training to develop competencies in order to raise awareness of information security and confidentiality,

Implementing necessary sanctions in case of information security and confidentiality violations,

Providing secure access to information assets for itself and its stakeholders,

Assessing and managing risks that may arise on information assets of itself and its stakeholders,

Protecting the organization's reliability and brand image,

Meeting information security and confidentiality requirements arising from national, international or sectoral regulations, relevant legislation and standard requirements, obligations arising from agreements, and corporate responsibilities towards internal and external stakeholders,

Reducing the impact of information security and confidentiality threats on business/service continuity and ensuring business continuity and sustainability,

Protecting and improving the level of information security and confidentiality with the established control infrastructure,

Protecting the confidentiality, integrity and availability of personal and corporate information as Data Controller and Data Processor.