Our Quality Policy

Our ISO 9001 Quality Management System Policy

To ensure that quality requirements are met within the scope of the QMS, GGSOFT commits to:

• Complying with legal and regulatory requirements within the scope and boundaries of the QMS, and taking into account obligations or dependencies arising from contracts or third parties,
• Identifying QMS risks, continuously reviewing them and taking the actions necessary to keep these risks at an acceptable level,
• Keeping employees' QMS awareness high,
• Keeping the QMS Policy up to date by evaluating it once a year at the Management Review meeting, or immediately in case of a major change, and continuously improving the effectiveness of the Information Security Management System,
• Reducing the impact of threats to business continuity and contributing to business continuity,
• Supporting customers in continuously improving the quality of their products and services through the services provided,
• Increasing efficiency in customers' areas of work by providing innovative, value-adding solutions,
• Supporting employees' competencies and skills through continuous training,
• Building quality awareness among all employees, ensuring they work in line with the requirements of the quality management system and contribute to its continuous improvement,
• Establishing, implementing and maintaining quality management systems aligned with international standards,
• Fostering a participatory management approach and, to this end, encouraging leadership and employee involvement,
• Contributing to social awareness and strengthening teamwork through volunteer-based social responsibility projects,
• Improving motivation, internal communication and corporate culture by organizing social activities with the participation of all employees.

The QMS policy is communicated to all employees and shared with relevant parties when necessary.

Within the framework of these principles, the authority to determine and update the scope and boundaries in which the QMS will operate belongs to the General Manager.

Within the framework of these principles, the authority to determine and update GGSOFT's internal roles and responsibilities within the scope of the QMS belongs to the General Manager.

Our ISO 27001 Information Security Management System Policy

To ensure information security within the scope of the ISMS, GGSOFT commits to:

• Complying with legal and regulatory requirements within the scope and boundaries of the ISMS, and taking into account obligations or dependencies arising from contracts or third parties,
• Identifying information security risks, continuously reviewing them and taking the actions necessary to keep these risks at an acceptable level,
• Keeping employees' information security awareness high,
• Keeping the ISMS Policy up to date by evaluating it once a year at the Management Review meeting, or immediately in case of a major change, and continuously improving the effectiveness of the Information Security Management System,
• Protecting the confidentiality, integrity, authorized availability and continuity of all corporate and personal information within scope,
• Managing information assets, identifying the needs and risks of information and information processing facilities, developing and implementing controls for risks, establishing working principles for risk treatment, and managing risks,
• Having the competence to respond quickly to information security incidents that may occur and minimize their impact,
• Continuously improving the information security management system and, in this context, ensuring the system's sustainability by setting information security objectives and targets,
• Reducing the impact of threats to business continuity and contributing to business continuity,
• Ensuring that training is delivered to develop technical and behavioral competencies in order to increase information security awareness.

The ISMS policy is communicated to all employees and shared with relevant parties when necessary.

Within the framework of these principles, the authority to determine and update the scope and boundaries in which the ISMS will operate belongs to the General Manager.

Within the framework of these principles, the authority to determine and update GGSOFT's internal roles and responsibilities within the scope of the ISMS belongs to the General Manager.

ISO 15504 SPICE Policy

Purpose: This policy has been prepared to ensure that our organization adopts an approach based on the ISO 15504 (SPICE) model for the continuous improvement of software processes, increased efficiency and higher quality levels. It provides the guidelines needed to identify, assess and improve the capabilities of software processes.

Policy Statement: Our organization embraces a culture of continuous improvement aimed at increasing the effectiveness and efficiency of software development processes. To this end, we will assess software processes in accordance with the requirements of the SPICE model, and plan and implement the necessary improvements. This policy provides a framework for improving quality and performance at all levels of the SPICE process.

Responsibilities

• Management: Senior management commits that improving software processes based on the SPICE model is a strategic priority and provides the necessary resources. Management sets and monitors annual targets for the assessment and improvement of software processes.
• Project Managers and Process Owners: Project managers and process owners assess the effectiveness of processes to meet the requirements of the SPICE model, identify appropriate improvement actions and ensure that these actions are implemented.
• Employees: All software development teams are responsible for applying the defined processes in line with the standards. Training and development programs will be provided to increase employees' competencies in line with SPICE requirements.

Implementation Steps

• Initial Assessment (SPICE Assessment): The current state of software processes will be assessed according to the SPICE model. This assessment will help determine the maturity level of processes and define improvement needs.
• Creating an Improvement Plan: An action plan will be created for the gaps and improvement areas identified after the SPICE assessment. This plan will include targets and timelines for raising the maturity levels of processes.
• Monitoring and Reporting: Process improvement activities will be monitored regularly and reported to senior management. Where deemed necessary, processes will be reorganized and improvement steps will be updated and continued.
• Training and Awareness: All software development employees will attend regular training on processes compliant with SPICE standards. Training will be continuously updated to ensure processes are applied more efficiently and effectively.
• Continuous Improvement: Processes will be reviewed regularly and aligned with evolving software engineering standards. Continuous improvement will be ensured in line with the requirements of the SPICE model.

Success Criteria

• A visible improvement will be achieved in the maturity levels of software processes.
• Product quality will improve and processes will become more efficient.
• The value delivered to customers will increase by the end of the improvement process.

Policy Review: This policy will be reviewed annually and updated when necessary. The review will take into account organizational needs, new technologies and changing industry standards.

This policy aims at the continuous improvement of software processes in line with the requirements of the SPICE model. The SPICE policy is communicated to all employees and shared with relevant parties when necessary.

Within the framework of these principles, the authority to determine and update the scope and boundaries in which SPICE will operate belongs to the General Manager.

Within the framework of these principles, the authority to determine and update PaperWork's internal roles and responsibilities within the scope of SPICE belongs to the General Manager.