Information Security Management System Policy

The main objective of the TS EN ISO 27001:2022 Information Security Management System and the ISO 20000-1:2019 Service Management System at Tripy Mobility Technology Inc. Information Services is to demonstrate that information security management is ensured across people, infrastructure, software, hardware, customer information, end-user information, organizational information, third-party information, and financial resources; to ensure risk management, to measure the performance of information security management processes, to regulate relationships with third parties regarding information security matters, and to establish, operate, and develop a service management system based on the ISO 20000-1 standard so that these objectives can be achieved in a reliable, consistent, and high-quality manner, based on the principle of continuous improvement, at a reasonable cost, and in compliance with relevant laws and regulations.

In this direction, the purpose of our ISMS-HYS Policy;

To protect TRIPY MOBILITY TECHNOLOGY Inc.’s information assets against any type of threat that may arise from internal or external sources, whether intentionally or unintentionally; to ensure access to information in accordance with business processes; to comply with legal and regulatory requirements; and to undertake initiatives aimed at continuous improvement;

To ensure the continuity of the three core elements of the Information Security Management System in all ongoing activities and to effectively manage services, these three core elements will be safeguarded to the highest degree:

Privacy: Preventing unauthorized access to sensitive information,

Integrity: Demonstrating that the accuracy and integrity of the information have been ensured,

Accessibility: Demonstrating that authorized individuals can access information when necessary,

To ensure the security of not only data stored electronically, but also all data in written, printed, oral, and similar formats.

Raise awareness by providing Information Security Management training to all staff.

Report all actual or suspected vulnerabilities in information security to the ISMS-HMS Team and ensure that they are investigated by the ISMS-HMS Team.

Develop, maintain, and test business continuity plans.

Conduct periodic assessments of information security and service management to identify existing risks.

Based on the evaluations, review and follow up on the action plans.

To prevent any disputes or conflicts of interest that may arise from the contracts.

To ensure access to information and meet business requirements for information systems.

To fully comply with service level agreements and contractual customer terms, the company aims to meet the performance targets for each service process, ensure business continuity for its customers, and improve its service processes.

As management, we are committed to ensuring the continuity of our integrated management system.