Our information security policy
ISO 27001:2022 aligned.
All our activities, from digital archive, document and media archive management systems to historical document digitisation, are carried out in accordance with ISO 27001:2022.
Scope
The scope of the system.
Our document, digital archive, electronic document, media and social media archive management systems; asset management and RFID solutions; custom software and IT systems; scanner and hardware sales and service; archive and library organisation and digitisation; cataloguing; and historical document digitisation, transcription, conservation and restoration activities are within the scope of this system.
PLT.32 Information Security Policy · Publication date 26.10.2023 · Rev. 00
- 01
To manage the Information Security Management System in accordance with TS EN ISO/IEC 27001:2022
- 02
To control the storage, transmission, modification, access and processing of assets, and to establish in-process controls through segregation of duties
- 03
To protect the availability, integrity and confidentiality of information
- 04
To apply physical security controls for assets kept in secure areas
- 05
To assess and manage the risks to information assets
- 06
To protect the reliability and reputation of the organisation
- 07
To apply the necessary sanctions in the event of information security breaches
- 08
To establish the administrative structure, resources and infrastructure for reporting breaches and taking rapid action
- 09
To meet the requirements arising from national and international regulations, legislation and contracts
- 10
To reduce the impact of threats on business continuity and to ensure continuity and sustainability
- 11
To conduct audits for compliance and improvement and to take the results into account in management review
- 12
To communicate the policy to all employees and to provide the necessary resources and training
- 13
To continuously improve the information security awareness of all stakeholders
- 14
To maintain and improve the information security level through the control infrastructure that has been established
FAQ
Information security: frequently asked questions.
Which standard do you work to?
Our Information Security Management System is managed in accordance with TS EN ISO/IEC 27001:2022. The policy was published as PLT.32, Rev. 00 on 26.10.2023.
What is the scope of the system?
Document, digital archive, electronic document, media and social media archive management systems; asset management and RFID solutions; custom software; scanner and hardware sales and service; archive and library organisation and digitisation; and historical document digitisation, transcription, conservation and restoration are covered.
How many commitments does the policy contain?
The policy contains 14 commitments. These include protecting the confidentiality, integrity and availability of information, assessing risks and taking rapid action in the event of breaches.
Are employees and stakeholders informed?
Yes. The policy is communicated to all employees, the necessary resources and training are provided, and the information security awareness of all stakeholders is continuously improved.
Next step
A secure digital archive.
Let's review your information security requirements together in the first meeting.
- 01
Fill in the form
Your organisation, approximate volume and needs.
- 02
On-site inspection
We see your storage area and define the scope together.
- 03
Roadmap
We present the timeline and budget proposal in writing.
