Istanbul Commerce University has earned the right to receive the ISO/IEC 27001:2022 Certificate by meeting international standards in information security management. This document confirms the university’s institutional competence in protecting its information assets and conducting secure digital processes.
Istanbul Commerce University has earned the right to receive the ISO/IEC 27001:2022 Information Security Management System (ISMS) Certificate by meeting international standards in information security management systems. The certificate earned through infrastructure work carried out by the Information Technologies Department demonstrates that our University effectively manages its information security processes and operates in accordance with internationally recognized standards.

REQUIREMENTS OF THE ISO/IEC 27001:2022 STANDARD
ISO/IEC 27001:2022 includes a risk-based approach, the Plan-Do-Check-Act (PDCA) cycle, alignment with organizational context and stakeholder expectations, measurable objectives, and the requirement for continuous improvement. This standard is applied to protect organizations’ information assets and ensure the principles of confidentiality, integrity, and availability.
ESTABLISHING AN INFORMATION SECURITY INFRASTRUCTURE
Our Information Technologies Department made significant contributions to the establishment and maintenance of the information security infrastructure during the documentation process. Technical and administrative regulations aimed at protecting the university’s information assets were systematically implemented throughout the process.
STRENGTHENING THE INSTITUTIONAL STRUCTURE
Istanbul Commerce University has established a system that prioritizes security in its digitalization processes, protects stakeholder data, and conducts academic activities in accordance with international standards by implementing the ISO/IEC 27001:2022 standard in line with its vision of quality management and corporate sustainability. Our university will continue to enhance information security and quality standards in the future.
PROCESS MONITORING AND SUSTAINABILITY
The Strategy Development and Quality Coordination Department will monitor the effectiveness of the BGYS through periodic internal audits, risk and opportunity updates, regular awareness training, and performance indicators (KPIs) to ensure the sustainability of certification. This approach supports the continuous development of information security within the organization. Istanbul Commerce University will continue its efforts to prioritize security in its digitalization processes and maintain compliance with international standards.
Click here to access the ISO/IEC 27001:2022 Information Security Management System Certificate.