Information Security Policy

Gökrail is committed to preserving the confidentiality, integrity, and accessibility of all information assets in accordance with international standards.

security 1. Purpose and Scope

This policy applies to all digital and physical information assets managed by Gökrail (Gök Yapı San. ve Tic. A.Ş.). It covers all employees, suppliers, business partners, and third-party contractors who have access to company information systems.

verified 2. Core Principles

Confidentiality: Ensuring information is accessible only to authorized personnel.
Integrity: Protecting the accuracy, completeness, and modified state of information.
Availability: Ensuring authorized users have access to information when required.

shield_lock 3. Risk Management & Compliance

Gökrail continuously assesses information security risks and applies technical and administrative controls in accordance with ISO/IEC 27001 standards and Turkish Personal Data Protection Law (KVKK).

contact_support 4. Incident Response & Contact

Any suspected security vulnerability or incident must be immediately reported to information.security@gokrail.com or info@gokgrup.com.