Policies

TÜBİTAK BİLGEM, in line with its vision, mission, and core values, implements Quality, Corporate Risk Management, and Information Security policies in the fields of information technology, information security, and advanced electronics, utilizing the knowledge and experience it has gained. Within this framework, it continually strives for excellence through ongoing improvements.

BİLGEM Quality Policy

In line with our Vision, Mission and Core Values;

To make BİLGEM Quality Management System effective, efficient and sustainable, to continuously improve the performance of our processes by monitoring risks and opportunities, to create awareness of the quality management system,
To secure R&D activities carried out to develop original, high value-added products and technologies for Türkiye’s technological independence,
To provide the technology, products and services that will best meet the needs of our stakeholders with the highest level of satisfaction through effective, versatile and strategic collaborations,
To maintain sufficient human resources with the necessary competencies and to support their continuous development in order to provide value-adding and guiding solutions to stakeholders.

BİLGEM Corporate Risk Management Policy

BİLGEM believes in the importance of risk management in order to create value with the technology, products and services it offers to its stakeholders, to increase stakeholder satisfaction, to achieve effective results by using its resources in the most efficient way and to ensure their sustainability. As an indicator of this, it considers Risk Management in all its managerial and operational activities.

In order to carry out its activities in a sustainable manner in line with its mission and to achieve its goals and objectives set out in its strategic plan, it identifies, grades, takes necessary measures, monitors and regularly reports corporate risks with an appropriate technology infrastructure and an effective systematic. It also continuously improves its risk management approach through reviews. It uses risk management models accepted in national and international practices for the integrated management of risks.

It is committed to ensuring that the necessary resources are available to fulfill the obligations and execute the actions related to risk management. It groups the risks it monitors under the following main categories: strategic risks, legal risks, financial risks, environmental risks, process risks, project risks, occupational health and safety risks and information security risks.

ISMS Risk Management Policy

BİLGEM conducts research on informatics, information security and advanced electronic technologies, which are needed by the civil and military sectors, in order to contribute to Turkey's defense power. In this framework, BİLGEM reveals and solves problems and ensures the implementation of these solutions. BİLGEM is a research, development and application center that acts as a bridge between universities, public and private sectors, developing collaborations and contributing to the technological experience of these stakeholders.

BİLGEM Presidency;

It believes in the importance of risk management and considers risk management in all management activities in order to create value with the technology, products and services it offers to its stakeholders, to increase stakeholder satisfaction, to use its resources effectively and efficiently, to ensure the sustainability of these and the confidentiality, integrity and accessibility of the information it processes, including personal data.
In order to fulfill the objectives and targets set within the scope of the Institutional Integrated Management System, it determines, monitors, processes, reports the results regularly, and reviews this policy periodically with the appropriate technology infrastructure and an effective measurement systematic.
It commits to the allocation of necessary resources to assist with the obligations and responsibilities associated with risk management.

BİLGEM Information Security Policy

BİLGEM Information Security Policy BİLGEM conducts research in the fields of informatics, information security and advanced electronic technologies required by all sectors. Within this framework, BİLGEM identifies and solves problems and ensures the implementation of these solutions. BİLGEM is a research, development and application center that acts as a bridge between universities, public and private sectors, developing collaborations and contributing to the technological know-how of these stakeholders. Accordingly, within the framework of TS ISO/IEC 27001 Information Security Management System (ISMS) standard, BİLGEM undertakes the following issues in order to ensure the confidentiality, integrity and accessibility of information:

Plans, implements and controls the ISMS by determining information security objectives and activities and ensures continuous improvement of the system.
Defines how the activities carried out meet the legislation, contract, standard and business requirements.
Defines how it meets the requirements of the Personal Data Protection Law (PDPL).
Carries out ISMS activities in an integrated manner with other management systems established within the organization.
Determines the duties, roles and responsibilities and necessary resources within the scope of ISMS.
Inventories information assets by determining confidentiality, integrity and accessibility criteria.
Identifies and assesses existing and potential risks and activates appropriate risk handling options to manage information security.
Makes business continuity plans, implements these plans and ensures continuous improvement of the process.
Develops solutions by following current technologies and innovations in information security.
Takes the necessary measures to ensure that all stakeholders comply with the issues determined in relation to information security.
Ensures that this policy is publicized, accessible, aware and implemented.
In case of violation of this policy, it initiates and follows the relevant processes.