Our Information Security Policy

Scope: This policy covers the information assets of the contracted institution management, product development, policy and claims operations, and information technology activities we carry out on behalf of insurance companies, together with the security measures used to protect these assets.

Our Information Security Management System (ISMS) ensures that all our operations are carried out in accordance with the ISO/IEC 27001:2022 standard. As TURASSIST Health Support Services Inc., we commit to:

Providing secure access to our own and our stakeholders' information assets,
Protecting the confidentiality, integrity and availability of information,
Assessing and managing risks that may arise on our own and our stakeholders' information assets,
Protecting the reliability and brand image of our company,
Applying the necessary sanctions in the event of an information security breach,
Meeting the information security requirements arising from the national, international and sectoral regulations we are subject to, legal requirements, contractual obligations, and our corporate responsibilities towards internal and external stakeholders,
Reducing the impact of information security threats on business and service continuity, and ensuring the continuity and sustainability of our operations,
Continuously improving the information security management system,
Defining the necessary information security roles and responsibilities, providing the required resources and making the related assignments,
Taking exceptional and out-of-scope activities into account when operating the ISMS,
Maintaining and improving the level of information security through the established control infrastructure.