DDO Guide Compliance Consultancy

DDO Information Security Communication Guide Compliance Consulting

In recent years, Turkey has undertaken a significant cybersecurity initiative that can be considered a transformative guide. The “Information and Communication Security Guide,” launched under the coordination of the Office of Digital Transformation, was finalized and approved on July 24, 2020. The Information and Communication Security Guide outlines the cybersecurity measures that public institutions and businesses providing critical infrastructure services must adhere to. Pursuant to Presidential Decree No. 2019/12 dated July 6, 2019, all public institutions and organizations, as well as businesses providing critical infrastructure services, are required to ensure compliance with the measures outlined in the guide for both existing and newly established information systems and to report such compliance. The information system infrastructures of institutions and organizations will be brought into compliance in phases, taking into account security priority levels and in accordance with the information defined in the guide. How do we provide support regarding the scope, content, implementation of measures, and change management of the guide? The guide covers all organizations with IT units as well as all businesses and institutions providing critical infrastructure services. The Information and Communication Security Guide Implementation Process includes security measures targeting asset groups, application and technology areas, and hardening processes. The risk level indicated in the guide is determined and applied based on the risk status of the assets.

• 1. Critical Level: Level 1
• 2. Critical Level: Levels 1 and 2
• 3. Critical Level: Measures for Levels 1, 2, and 3 Are Applied

Section 4 of the guide contains security measures related to application and technology areas for the asset groups outlined in Section 3, while Section 5 covers hardening measures. The Information and Communication Security Guide, along with the organization’s asset groups and any legislation or secondary regulations affecting these groups, is applied in change management. Why Is the Information and Communication Security Guide Important for the ISMS? By completing their compliance efforts with the guide, organizations will achieve a more robust Information Security Management System (ISMS) built upon the foundation established by ISO 27001. How Is Consulting and Auditing for the Information and Communication Security Audit Guide Provided? Organizations complete the necessary work for the provisions explicitly stated in the guide to ensure compliance. As a result of the preparations required for the audit, they must conduct an information and communication security audit at least once a year, either through internal audit or by contracting a service. The Information and Communication Security Audit Guide is a document published to assess the compliance of organizations with the Information and Communication Security Guide. You can access the Information and Communication Security Guide documents at https://cbddo.gov.tr/ . The Audit Guide will be updated by the Cyber Security Authority. You can access the most current version of the Audit Guide currently published at https://cbddo.gov.tr/bgrehber Ensure Your Business’s Compliance with the Guide Now with Securesys! As part of our expertise at Securesys, we provide consulting services regarding compliance with the guide. Our team and affiliates include legal advisors specializing in cybersecurity, certified IT security professionals, and process consultants. Contact our expert team immediately to fulfill your obligations under the guidelines and avoid criminal penalties. We’re here to ensure your privacy! You can message our Securesys Solution Expert via WhatsApp for instant assistance.

Contact Our Experts Now