Information Security Policy

By implementing this policy, the top management of Dereli Electromagnetic Brake Industry and Trade Co. Ltd. aims and declares to fulfill the following fundamental principles necessary for ensuring the confidentiality, integrity, and accessibility of its information assets, maintaining continuity, and sustainability through the Information Security Management System to be established. This is to be done both while achieving its vision and enhancing sustainable development and competitive power.

---

• Ensuring the necessary participation and support for compliance with the standards and requirements of the Information Security Management System,
• Ensuring compliance with the requirements specified by the laws, regulations, directives of the Republic of Turkey, customer contracts, and legal regulations required by the business,
• Providing the necessary support to prevent unauthorized use, disclosure, and damage to all information assets within the scope,
• Supporting and contributing to the efforts to assess the risks on information assets and reduce identified risks to acceptable levels,
• Providing the necessary support for planning and regularly implementing awareness programs for employees and, when relevant, supplier employees to increase information security awareness and encourage their contribution to the system's operation,
• Ensuring the necessary support for detecting, reporting, resolving, and preventing the recurrence of actual or suspected violations related to information security incidents,
• Providing the necessary support and contribution to ensure business continuity and maintain planned levels of access to information,

We will ensure the provision of necessary resources for the implementation, maintenance, and improvement of the Information Security Management System. We aim to integrate the ISO 27001 Information Security Management System into our company's business processes, considering information security requirements at every stage.