Milli Economic Society is committed to protecting its information, information systems, computer networks, digital assets and business information against unauthorized access, disclosure, alteration, loss, misuse, cyber-attacks and other information-security threats. The Company follows the principles of ISO/IEC 27001:2022 — Information Security, Cybersecurity and Privacy Protection — Information Security Management Systems — Requirements, applying a risk-based approach to maintaining the confidentiality, integrity and availability of information. The Company shall establish appropriate organizational, technical and procedural controls, including access control, secure use of information systems, password protection, data backup, malware protection, security awareness and responsible use of Company IT resources.
Milli Economic Society shall comply with the applicable requirements of the legislation of Turkmenistan concerning cybersecurity, information security, information technologies and protection of information, including the applicable provisions of the Law of Turkmenistan “On Cybersecurity”. The Company shall take appropriate measures to prevent, detect, respond to and recover from cybersecurity incidents and shall ensure that employees, contractors and other authorized users handle Company information and IT systems responsibly. Access to information and systems shall be granted according to business requirements and authorized responsibilities, while confidential and commercially sensitive information shall be protected against unauthorized disclosure, copying, modification or loss. Cybersecurity incidents shall be reported through the Company’s established reporting channels and investigated and managed in accordance with applicable internal procedures and legal requirements.
Milli Economic Society is committed to continually improving its cybersecurity and information-security practices through risk assessment, periodic review of controls, employee awareness and training, incident preparedness, secure management of information assets and appropriate evaluation of third-party and contractor cybersecurity risks. The Company shall maintain appropriate records relating to cybersecurity controls and incidents and shall periodically review this Policy to ensure its continuing suitability and effectiveness. All employees and persons working on behalf of Milli Economic Society are responsible for complying with this Policy and with applicable Turkmenistan legislation and Company information-security procedures.