Information Security Policy

Vakıf Katılım Bank operates an Information Security Management System to ensure the confidentiality, integrity, and availability of information generated, processed, transmitted, and stored in relation to all products and services offered to its customers and stakeholders.

Projects, human resources, and investments are planned and implemented by monitoring the sector and best practices. Information security is regularly monitored and continuously improved.

The necessary measures and precautions against threats and risks are taken and reviewed on a regular basis. In this context, risk management processes have been established within the Bank. Corrective/preventive activities are carried out to mitigate potential risks and threats. Compliance is ensured with all legal and regulatory requirements applicable to Information Security. Incidents targeting the Bank's information and assets are evaluated within the scope of incident management processes established within the Bank.

The necessary organization and roles have been established within the Bank under the Information Security Management System. The Bank's approach to information security is communicated to all personnel and other stakeholders through various channels, and roles/responsibilities are disclosed. Various activities are organized within the institution and feedback is provided to increase information security awareness.