Compliance Consultancy
These are the solutions we provide regarding the compliance of companies with the mandatory regulations on information security, especially with the Law on the Protection of Personal Data, the Information and Communication Security Guide of the Presidential Digital Transformation Office, the Banking Supervision and Regulatory Authority Communiqués, the Laws of the Energy Market Regulatory Authority, Notification on the Status of Authorized Economic Operator.
All legal entities must comply with GDPR and Turkish Personal Data Protection Law (KVKK) published in 2016. Compliance requires legal, technical and process modifications. In cases of non-compliance, fines exceeding milllions of euros and Turkish Liras can be imposed, as well as conviction penalties.
Authorized Economic Operator is an international status that provides certain conveniences and privileges in customs procedures to reliable companies that fulfill their customs obligations, have a regular and traceable registration system, have financial adequacy, safety and security standards, and can perform self-control.
The “Regulation on Information Systems and Electronic Banking Services of Banks”, which was amended on March 15, 2020, with up-to-date technologies and an advanced governance perspective, requires compliance, especially for banks and bank subsidiaries.
EPDK has published the Information Security Regulation in the Energy Sector, Industrial Control Systems (ICS) and has determined the mandatory security measures to be taken in ICS systems. Security measures to be taken are detailed in the ICS Security Controls document. Compliance with this regulation and control document is reviewed by the audits. In addition, regular follow-up documents related to risk notification, inventory notification and risk reduction for ICS’s are required from organizations within the scope of the regulation.
For detailed information requests please fill out our contact form.
Address: