INFORMATION SECURITY POLICY
MYCRO Clinical Research and Health Services A.Ş., provides services in the field of 'Clinical Research and Health Services, Clinical Research Oriented Software System, Project Management, Budget Management, Centre Management, Logistics and Supply Management, Archive Management, Data Management and Processing, Statistics and Analysis'.
MYCRO is committed to confidentiality, integrity and protection of all physical and electronic information assets. Information and information security requirements will be in line with our corporate objectives.
MYCRO management will provide employment of well-trained, competent personnel who are open to change and will provide financing to ensure competition with our competitors in the sector and will have sufficient equipment and infrastructure. This infrastructure and personnel will be provided with the necessary financing. Business continuity and emergency plans, data backup procedures, avoiding viruses and hackers, access control systems and information security breach notification will form the cornerstones of our core activities. The vulnerabilities and threats obtained as a result of risk assessments will be eliminated and secure access to the information of our customers and personnel will be ensured.
In addition, as a result of risk assessments, we will determine our goals and provide the resources and conditions necessary to achieve these goals.
In order to realise this policy, we expect our employees to make the requirements of the Information Security Management System a way of working. All personnel and certain third parties will be provided with appropriate training on the Information Security Management System.
Applicable conditions related to information security and the opportunities and requirements brought by these conditions will be fulfilled and these conditions will be continuously improved. In addition, adaptation of our company, our personnel and all related parties to this system will be ensured.
Our Information Security Policy is reviewed and updated with the participation of senior management and unit managers to ensure its suitability, accuracy and effectiveness once a year or in case of significant changes related to our company.