Within the scope of the Information Security Management System (ISMS), TMEX, in order to ensure the security of the markets it operates and the basic and auxiliary related products and services it offers for them, the processes related to them and the premises where they are provided, and the information and information assets used for these activities;

• Comply with legal and regulatory requirements within the scope and boundaries of the ISMS, taking into account the contractual obligations or dependencies of third parties,
• Identifying information security risks and taking the necessary actions to keep risks at an acceptable level by constantly reviewing them,
• To keep the information security awareness of exchange employees high,
• To ensure that management systems are evaluated through management review meetings and to keep the policy up-to-date,
• To protect the confidentiality, integrity, accessibility and continuity of all corporate and personal information within the scope of the policy,
• Managing assets, identifying the needs and risks of information and IT facilities, developing and implementing controls for risks, setting out the working principles for the processing of risks, managing risks,
• To have the competence to quickly intervene in information security incidents that may occur and to minimize the impact of the incident,
• To continuously improve the ISMS, to ensure the sustainability of the system by determining information security goals and objectives within this framework,
• Mitigate the impact of threats to business continuity and contribute to business continuity,
• It undertakes to ensure that trainings to develop technical and behavioral competencies are carried out in order to increase information security awareness.