{"id":1869,"date":"2025-01-27T09:40:06","date_gmt":"2025-01-27T09:40:06","guid":{"rendered":"https:\/\/www.abacicard.com\/en\/?page_id=1869"},"modified":"2025-01-27T11:31:10","modified_gmt":"2025-01-27T11:31:10","slug":"potansiyel-veri-guvenligi-ihlali-protokolu","status":"publish","type":"page","link":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/","title":{"rendered":"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc"},"content":{"rendered":"\n
\u0130\u015fbu protokol, bir veri ihlali halinde Abac\u0131 Kart San. Tic. A.\u015e. \u2019nin (\u201cAbac\u0131 Kart \u201d) mevcut teknik, idari ve fiziki tedbirlerini belirlemek amac\u0131 ile haz\u0131rlanm\u0131\u015ft\u0131r. Abac\u0131 Kart \u2019\u0131n itibar ve g\u00fcvenli\u011finin zedelenmesinin \u00f6n\u00fcne ge\u00e7ilmesi ve do\u011fabilecek zararlar\u0131n Abac\u0131 Kart \u2019\u0131 etkileyen sonu\u00e7lar\u0131n\u0131n en aza indirilmesi ama\u00e7lanmaktad\u0131r.<\/h5>\n\n\n\n

Veri ihlalleri her durumda m\u00fcmk\u00fcnd\u00fcr. Veri g\u00fcvenli\u011finin en \u00fcst d\u00fczeye ta\u015f\u0131nmas\u0131nda dahi bir veri ihlali s\u00f6z konusu olabilir. B\u00f6yle bir durumda at\u0131lacak ad\u0131mlar\u0131n belirlenmesi ve uygulanmas\u0131 \u00f6nem arz etmektedir.<\/p>\n\n\n\n

Bu protokol, Abac\u0131 Kart \u2019\u0131n zaman, senaryo ve teknolojiden ba\u011f\u0131ms\u0131z olarak veri ihlali durumunda izlemesi gereken ad\u0131mlar\u0131 ortaya koymay\u0131 ama\u00e7lamaktad\u0131r.<\/p>\n\n\n\n

B.    VER\u0130 \u0130HLAL\u0130NE KAR\u015eI \u015e\u0130RKET\u0130N SORUMLULUKLARI<\/h1>\n\n\n\n

A\u015fa\u011f\u0131da belirtilen \u00f6nlemler al\u0131narak veri ihlallerinin m\u00fcmk\u00fcn oldu\u011funca \u00f6n\u00fcne ge\u00e7ilmesi hedeflenmektedir:<\/p>\n\n\n\n

    \n
  1. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlali do\u011furabilecek senaryolar listelenmeli ve veri ihlali durumunda belirlenen her senaryo i\u00e7in yap\u0131lacaklar planlanmal\u0131d\u0131r.<\/li>\n\n\n\n
  2. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlali durumunda, konuyu sonland\u0131rabilecek yetkili ki\u015fi veya ki\u015filer belirlenmeli, bu ki\u015filerin g\u00f6rev ve yetki tan\u0131mlar\u0131 yap\u0131lmal\u0131d\u0131r.<\/li>\n\n\n\n
  3. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlalinin \u00f6n\u00fcne ge\u00e7ilebilmesi i\u00e7in\u00a0Acil Durum Eylem Plan\u0131 Kontrol Listesi<\/strong>\u2019nde yer alan ad\u0131mlar izlenmelidir.<\/li>\n\n\n\n
  4. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlalinin \u00e7\u0131k\u0131\u015f noktas\u0131 belirlenmeli, deliller toplanmal\u0131 ve korunmal\u0131d\u0131r.<\/li>\n\n\n\n
  5. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Somut olaya uyarlanarak kullan\u0131labilecek\u00a0taslak ihlal bildirimleri<\/strong>\u00a0haz\u0131rlanmal\u0131d\u0131r. Ki\u015fisel Verilerin Korunmas\u0131 Kurulu taraf\u0131ndan \u00f6ng\u00f6r\u00fclen bir metin yay\u0131mlanmas\u0131 halinde ise yay\u0131mlanan metin esas al\u0131nmal\u0131d\u0131r.<\/li>\n\n\n\n
  6. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlali sonucu Ki\u015fisel Verilerin Korunmas\u0131 Kurumu gibi kurumlara hukuken bildirim y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc ortaya \u00e7\u0131km\u0131\u015f ise gerekli bildirimler yap\u0131larak bu y\u00fck\u00fcml\u00fcl\u00fck yerine getirilmelidir.<\/li>\n\n\n\n
  7. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlali ile Abac\u0131 Kart b\u00fcnyesinde bulunan ki\u015fisel veriler \u00fczerinde herhangi bir i\u015flem (ele ge\u00e7irme, silme, g\u00fcncelleme gibi) yap\u0131ld\u0131\u011f\u0131na kanaat getiriliyorsa, 6698 say\u0131l\u0131 Ki\u015fisel Verilerin Korunmas\u0131 Kanununun ilgili h\u00fck\u00fcmleri uyar\u0131nca veri sahipleri konu ile ilgili derhal bilgilendirilmelidir.<\/li>\n\n\n\n
  8. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>\u0130hlal hakk\u0131nda i\u00e7 birimlerin yetersiz oldu\u011fu d\u00fc\u015f\u00fcn\u00fcl\u00fcyorsa ilgili gizlilik s\u00f6zle\u015fmeleri yap\u0131larak gerekli olan teknik ve hukuki destek al\u0131nmal\u0131d\u0131r.<\/li>\n<\/ol>\n\n\n\n

    C.    VER\u0130 G\u00dcVENL\u0130\u011e\u0130 \u0130HLAL\u0130 DURUMUNDA YAPILACAKLAR<\/h1>\n\n\n\n

    Veri ihlali ile kar\u015f\u0131la\u015fan veya veri ihlalini tespit eden \u00e7al\u0131\u015fan\u0131n vakit kaybetmeden departman yetkilisini ve Abac\u0131 Kart KVKK \u00c7al\u0131\u015fma Grubu\u2019nu bilgilendirmesi gerekmektedir. Sonras\u0131nda departman yetkilisi ve Abac\u0131 Kart KVKK \u00c7al\u0131\u015fma Grubu ihlalin yaratabilece\u011fi sonu\u00e7lar\u0131 de\u011ferlendirerek ilgili g\u00f6rebilecekleri ki\u015fi veya departmanlara konuyu ta\u015f\u0131mal\u0131d\u0131r.<\/p>\n\n\n\n

    \u0130hlal s\u0131ras\u0131nda bilgilendirilmek \u00fczere tespit edilen \u201cM\u00fcdahale Ekibi<\/strong>\u201d nde bulunan irtibat ki\u015fileri aras\u0131nda a\u015fa\u011f\u0131da belirlenen ki\u015filer yer almal\u0131 ve i\u015fbu prosed\u00fcrde yer alan t\u00fcm durumlarda bu irtibat listesi kullan\u0131lmal\u0131d\u0131r:<\/p>\n\n\n\n

      \n
    1. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>En az bir Abac\u0131 Kart Y\u00f6netim personeli,<\/li>\n\n\n\n
    2. \u00a0\u00a0\u00a0\u00a0<\/strong>Hukuk \u00e7al\u0131\u015fan\u0131,<\/li>\n\n\n\n
    3. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>BT \u00e7al\u0131\u015fan\u0131,<\/li>\n\n\n\n
    4. \u00a0\u00a0\u00a0\u00a0<\/strong>\u0130nsan Kaynaklar\u0131 \u00e7al\u0131\u015fan\u0131.<\/li>\n<\/ol>\n\n\n\n

      \u0130hlal kapsam\u0131nda Abac\u0131 Kart \u2019\u0131n e-posta sisteminin de ihlalden etkilendi\u011fi d\u00fc\u015f\u00fcn\u00fcl\u00fcyorsa, daha fazla veri ihlalinin ortaya \u00e7\u0131kmamas\u0131 ve ihlalin sonland\u0131r\u0131labilmesi ad\u0131na yap\u0131lacak bildirimler telefon yolu ile veya y\u00fcz y\u00fcze yap\u0131lmal\u0131d\u0131r.<\/p>\n\n\n\n

      1.     \u0130hlalin De\u011ferlendirilmesi<\/h2>\n\n\n\n

      \u0130hlal de\u011ferlendirilirken yap\u0131lacak her t\u00fcrl\u00fc i\u015flem kay\u0131t alt\u0131na al\u0131nmal\u0131, kay\u0131t esnas\u0131nda a\u015fa\u011f\u0131da belirtilen detaylar dikkate al\u0131nmal\u0131d\u0131r. Bu detaylar\u0131n yetersiz kald\u0131\u011f\u0131n\u0131n d\u00fc\u015f\u00fcn\u00fcld\u00fc\u011f\u00fc durumlarda veri ihlalinin durumu de\u011ferlendirilerek ek de\u011ferlendirmelerde bulunulabilir. Kay\u0131t alt\u0131na al\u0131nmas\u0131 beklenen i\u015flemler ba\u015f\u0131nda a\u015fa\u011f\u0131dakiler gelmektedir:<\/p>\n\n\n\n

        \n
      1. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>\u0130hlalin hangi verileri ve sistemleri etkiledi\u011fi<\/li>\n\n\n\n
      2. \u00a0\u00a0\u00a0\u00a0<\/strong>Yap\u0131lan i\u015flemlerin saati ve tarih bilgileri<\/li>\n\n\n\n
      3. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>\u0130hlal ile ilgili olabilecek ki\u015filer (olay\u0131 fark eden, \u00f6nlemleri ger\u00e7ekle\u015ftirmeye \u00e7al\u0131\u015fan, kayd\u0131 olu\u015fturan ki\u015filer)<\/li>\n\n\n\n
      4. \u00a0\u00a0\u00a0\u00a0<\/strong>\u0130hlalin de\u011ferlendirilmesi ve sonlanmas\u0131 i\u00e7in at\u0131lan ad\u0131mlar<\/li>\n<\/ol>\n\n\n\n

        2.     Veri \u0130hlalinin \u0130ncelenmesi ve Hasar\u0131 En Aza \u0130ndirme S\u00fcre\u00e7leri<\/h2>\n\n\n\n

        \u0130lgili birimin veri ihlalinin nas\u0131l ger\u00e7ekle\u015fti\u011fini belirlemesinin ard\u0131ndan, ihlalin tekrar ya\u015fanmamas\u0131 ve zarar\u0131n b\u00fcy\u00fcmemesi i\u00e7in a\u015fa\u011f\u0131da listelenen \u00f6nlemler al\u0131nmal\u0131d\u0131r. Bu \u00f6nlemlerin yetersiz kald\u0131\u011f\u0131n\u0131n d\u00fc\u015f\u00fcn\u00fcld\u00fc\u011f\u00fc durumlarda, Abac\u0131 Kart ek \u00f6nlemler de almakla y\u00fck\u00fcml\u00fcd\u00fcr.<\/p>\n\n\n\n

          \n
        1. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri sahipli\u011fi fiziki veya elektronik olarak kaybolmu\u015f bir veri s\u00f6z konusu ise, bu verilerin g\u00fcvenli\u011fi Abac\u0131 Kart taraf\u0131ndan tekrar sa\u011flanmal\u0131d\u0131r.<\/li>\n\n\n\n
        2. \u00a0\u00a0\u00a0\u00a0<\/strong>Kolluk kuvvetlerine haber verilmesi uygun ise vakit kaybetmeden bu ba\u015fvuru yap\u0131lmal\u0131d\u0131r.<\/li>\n\n\n\n
        3. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Verilerin bulundu\u011fu ortamlara giri\u015f \u00e7\u0131k\u0131\u015flar s\u0131n\u0131rland\u0131r\u0131lmal\u0131d\u0131r.<\/li>\n\n\n\n
        4. \u00a0\u00a0\u00a0\u00a0<\/strong>Fiziksel ortamda veya bilgisayar ortam\u0131nda tutulan veriler fiziki olarak ihlale u\u011fram\u0131\u015f ise fiziki ortama ait giri\u015f \u2013 \u00e7\u0131k\u0131\u015f ve kamera kay\u0131tlar\u0131 korunmal\u0131d\u0131r.<\/li>\n\n\n\n
        5. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Bilgisayar ortam\u0131nda tutulan veriler ihlale u\u011fram\u0131\u015f ise mevcut denetim izi kay\u0131tlar\u0131 olu\u015fabilecek herhangi bir m\u00fcdahaleye kar\u015f\u0131 korunmal\u0131d\u0131r.<\/li>\n<\/ol>\n\n\n\n

          Abac\u0131 Kart yap\u0131lan inceleme ve analizler s\u0131ras\u0131nda a\u015fa\u011f\u0131da listelenen maddelerin \u00fczerinden ilerleyerek veri ihlali ile ilgili aksiyon almal\u0131d\u0131r:<\/p>\n\n\n\n

            \n
          1. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlali sebeplerinin de\u011ferlendirilmesi,<\/li>\n\n\n\n
          2. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Veri ihlalinden etkilenen veri sahiplerinin belirlenmesi<\/li>\n\n\n\n
          3. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>\u0130hlale u\u011frayan verilerin ne gibi ama\u00e7lar i\u00e7in kullan\u0131laca\u011f\u0131n\u0131n tespit edilmesi<\/li>\n\n\n\n
          4. \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Risk alt\u0131ndaki di\u011fer sistemlerin belirlenmesi<\/li>\n<\/ol>\n\n\n\n

            Bu s\u00fcre\u00e7te veri ihlalini inceleyen sorumlu ki\u015fi mutlaka M\u00fcdahale Ekibi<\/strong>\u2019 nde bulunan BT personelinden destek almal\u0131d\u0131r. BT personelinin yetersiz kald\u0131\u011f\u0131 durumlarda, BT Departman\u0131\u2019ndan veya d\u0131\u015f kaynaklardan destek al\u0131nabilir.<\/p>\n\n\n\n

            Veri ihlali incelenirken tutulacak olan t\u00fcm belgeler gizli olmal\u0131d\u0131r ve belgeler \u00fczerinde \u201cGizli ve \u0130mtiyazl\u0131d\u0131r<\/strong>\u201d ifadesi bulunmal\u0131d\u0131r.<\/p>\n\n\n\n

            3.     Veri \u0130hlali Sonras\u0131 Yap\u0131lacak Bildirimler<\/h2>\n\n\n\n

            Veri ihlali sonras\u0131nda Abac\u0131 Kart, ki\u015fi ve kurumlar\u0131 bilgilendirmekle y\u00fck\u00fcml\u00fcd\u00fcr. Bilgilendirme verilerin sahibi ki\u015fi ise direkt olarak ger\u00e7ek ki\u015filere, ba\u015fka bir \u015firketin (i\u015f ortaklar\u0131 veya di\u011fer \u015firketler) verileri ise ilgili \u015firkete yap\u0131lmal\u0131d\u0131r.<\/p>\n\n\n\n

            Bildirim yap\u0131lmas\u0131 hukuken gereklidir ve kamu ili\u015fkileri i\u00e7in \u00f6nem ta\u015f\u0131maktad\u0131r. Bu sebeple yap\u0131lacak olan bildirim planl\u0131 olmal\u0131 ve bildirim metni ilgili departman yetkilisi taraf\u0131ndan haz\u0131rlanmal\u0131d\u0131r. Haz\u0131rlanan bildirim metni \u015eirket Avukat\u0131\u2019 na\u2019n\u0131n incelemesinin ard\u0131ndan ilgili yerlerle payla\u015f\u0131lmal\u0131d\u0131r. Bildirim i\u00e7erisinde a\u015fa\u011f\u0131daki ba\u015fl\u0131klara yer verilmeli, bu ba\u015fl\u0131klar\u0131n yeterli olmad\u0131\u011f\u0131 d\u00fc\u015f\u00fcn\u00fclen durumlarda \u015eirket Avukat\u0131 \u2019n\u0131n bilgisi d\u00e2hilinde ekleme yap\u0131lmal\u0131d\u0131r:<\/p>\n\n\n\n

              \n
            1. \u00a0\u00a0\u00a0\u00a0 Veri ihlalinin a\u00e7\u0131klanmas\u0131,<\/li>\n\n\n\n
            2. \u00a0\u00a0\u00a0\u00a0 Veri ihlalinden kimlerin etkilendi\u011fi,<\/li>\n\n\n\n
            3. \u00a0\u00a0\u00a0\u00a0 Al\u0131nan \u00f6nlemler,<\/li>\n\n\n\n
            4. \u00a0\u00a0\u00a0\u00a0 Abac\u0131 Kart \u2019\u0131n veri ihlalinden etkilenen ki\u015filere nas\u0131l yard\u0131mc\u0131 olaca\u011f\u0131,<\/li>\n\n\n\n
            5. \u00a0\u00a0\u00a0\u00a0 \u0130hlalden etkilenen ki\u015filerin Abac\u0131 Kart \u2019ya ula\u015fabilecekleri ileti\u015fim bilgileri.<\/li>\n<\/ol>\n\n\n\n

              Analizler s\u0131ras\u0131nda ihlale konu olan verilerin ba\u015fka bir \u015firkete ait oldu\u011fu tespit edilirse, ilgili \u015firkete ihlal bildirimi yap\u0131lmal\u0131d\u0131r. Bu bildirim planlan\u0131rken a\u015fa\u011f\u0131daki \u015fartlar dikkate al\u0131nmal\u0131d\u0131r:<\/p>\n\n\n\n

                \n
              1. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Bildirim, belirlenmi\u015f olan ilgili \u015firket irtibat ki\u015fisi veya ki\u015filerine yap\u0131lmal\u0131d\u0131r. Bu ki\u015filere ula\u015f\u0131lamamas\u0131 durumunda Abac\u0131 Kart \u015eirket Avukat\u0131\u2019 na dan\u0131\u015f\u0131lmadan farkl\u0131 bir ki\u015fiye bildirim yap\u0131lmamal\u0131d\u0131r.<\/li>\n\n\n\n
              2. \u00a0\u00a0\u00a0\u00a0<\/strong>Bildirim ileti\u015fim kanal\u0131 veri ihlali ile ili\u015fkili olacak \u015fekilde M\u00fcdahale Ekibi taraf\u0131ndan belirlenmelidir.<\/li>\n\n\n\n
              3. \u00a0\u00a0\u00a0\u00a0\u00a0<\/strong>Bilgi Teknolojileri Acil Durum Eylem Plan\u0131 Kontrol Listesinin Amac\u0131<\/strong><\/li>\n<\/ol>\n\n\n\n

                D.    B\u0130LG\u0130 TEKNOLOJ\u0130LER\u0130 AC\u0130L DURUM EYLEM PLANI KONTROL L\u0130STES\u0130<\/h1>\n\n\n\n

                \u0130\u015fbu Bilgi Teknolojileri Acil Durum Eylem Plan\u0131 Kontrol Listesi (\u201cKontrol Listesi\u201d), Abac\u0131 Kart  \u00e7al\u0131\u015fanlar\u0131n\u0131n bilgi teknolojileri (\u201cBT\u201d) sistemlerinde bir zafiyet ya\u015fanmas\u0131 durumunda izleyecekleri ad\u0131mlara rehberlik etmek amac\u0131yla haz\u0131rlanm\u0131\u015ft\u0131r. BT sistemlerinde ya\u015fanan zafiyetler kasten ya da sehven yap\u0131lan hatalar sebebiyle veya s\u00fcrekli de\u011fi\u015fen sald\u0131r\u0131 teknikleri kullan\u0131larak meydana gelmektedir. Kontrol Listesi, herhangi bir zafiyetin \u00f6nlenmesi veya zafiyetin tam olarak tespit edilmesi gibi bir ama\u00e7 ta\u015f\u0131mamaktad\u0131r.<\/p>\n\n\n\n

                Belirli aral\u0131klarla g\u00f6zden ge\u00e7irilmeli ve g\u00fcncellenmelidir.<\/p>\n\n\n\n

                2. Kontrol Listesi<\/strong><\/p>\n\n\n\n

                  \n
                1. Vaka ya\u015fand\u0131 m\u0131 veya vaka ya\u015fand\u0131\u011f\u0131ndan \u015f\u00fcpheleniliyor mu?<\/li>\n\n\n\n
                2. Vaka devam ediyor mu?<\/li>\n\n\n\n
                3. Vakan\u0131n ki\u015fisel verilere bir etkisi oldu mu?<\/li>\n\n\n\n
                4. Vakayla ilgili aksiyonlar\u0131 alacak bir kriz masas\u0131 kuruldu mu?<\/li>\n\n\n\n
                5. Etkilenen sistemler kurum a\u011f\u0131ndan izole edildi mi?<\/li>\n\n\n\n
                6. Etkilenen sistemlerin tutuldu\u011fu sunucu\/pclerin kapanmas\u0131 engellendi mi?<\/li>\n\n\n\n
                7. A\u015fa\u011f\u0131daki bilgiler kay\u0131t alt\u0131na al\u0131nd\u0131 m\u0131?<\/li>\n<\/ol>\n\n\n\n

                  7.1.   Vakay\u0131 tespit eden ki\u015fi veya alarm\u0131n kayna\u011f\u0131<\/p>\n\n\n\n

                  7.2.   Vakaya ait ilk tespitin tarih ve saati<\/p>\n\n\n\n

                  7.3.   Vaka hakk\u0131nda temel bilgiler<\/p>\n\n\n\n

                  7.4.   Hangi ki\u015filerin veya sistemlerin etkilendi\u011fi<\/p>\n\n\n\n

                  7.5.   D\u00e2hil olan ki\u015filerin veya sistemlerin konumu<\/p>\n\n\n\n

                  7.6.   Vakan\u0131n nas\u0131l tespit edildi\u011fi<\/p>\n\n\n\n

                    \n
                  1. Etkilenen sistemin \u00f6nem derecesi kritik mi?<\/li>\n\n\n\n
                  2. Hedef olan sistem(ler)in:<\/li>\n<\/ol>\n\n\n\n

                    9.1.   Ad\u0131<\/p>\n\n\n\n

                    9.2.   \u0130\u015fletim sistemi<\/p>\n\n\n\n

                    9.3.   IP adresi<\/p>\n\n\n\n

                    9.4.   A\u011f \u00fczerindeki konumu<\/p>\n\n\n\n

                    9.5.   Fiziksel konumu<\/p>\n\n\n\n

                    9.6.   Kullan\u0131m amac\u0131<\/p>\n\n\n\n

                      \n
                    1. Hangi sistemler veya veriler tehlike alt\u0131nda?<\/li>\n\n\n\n
                    2. Tehlike alt\u0131ndaki sistemlerin veya verilerin kategorisi nedir?<\/li>\n\n\n\n
                    3. Sald\u0131r\u0131n\u0131n kayna\u011f\u0131 kurum i\u00e7i mi, kurum d\u0131\u015f\u0131 m\u0131?<\/li>\n\n\n\n
                    4. Vakan\u0131n soru\u015fturulmas\u0131 s\u0131ras\u0131nda a\u015fa\u011f\u0131daki \u00e7al\u0131\u015fmalar yap\u0131ld\u0131 m\u0131?<\/li>\n<\/ol>\n\n\n\n

                      13.1.      Sistem loglar\u0131n\u0131n incelenmesi<\/p>\n\n\n\n

                      13.2.      Uygulama loglar\u0131n\u0131n incelenmesi<\/p>\n\n\n\n

                      13.3.      Loglardaki bo\u015fluklar\u0131n denetlenmesi<\/p>\n\n\n\n

                      13.4.      Varsa firewall loglar\u0131n\u0131n incelenmesi<\/p>\n\n\n\n

                      13.5.      Varsa VPN eri\u015fim loglar\u0131n\u0131n incelenmesi<\/p>\n\n\n\n

                      13.6.      Varsa router loglar\u0131n\u0131n incelenmesi<\/p>\n\n\n\n

                      13.7.      Uygulama loglar\u0131n\u0131n kontrol edilmesi<\/p>\n\n\n\n

                      13.8.      Etkilenen sistemlerin memory dump dosyalar\u0131n\u0131n al\u0131nmas\u0131 ve incelenmesi<\/p>\n\n\n\n

                      13.9.      Vakay\u0131 tespit eden ve vakadan etkilenen \u00e7al\u0131\u015fanlarla m\u00fclakatlar\u0131n yap\u0131lmas\u0131 ve vakayla ilgili m\u00fcmk\u00fcn oldu\u011funca detayl\u0131 bilgi al\u0131nmas\u0131<\/p>\n\n\n\n

                      13.10.    Elde edilen deliller i\u00e7in delil zinciri (\u201cChain of Custody\u201d) dok\u00fcman\u0131 haz\u0131rlanmas\u0131<\/p>\n\n\n\n

                      13.11.    Elde edilen verilerin sadece eri\u015fim yetkisi olan ki\u015filerin ula\u015fabildi\u011fi, giri\u015f-\u00e7\u0131k\u0131\u015flar\u0131 kontrol alt\u0131nda olan bir alanda tutulmas\u0131<\/p>\n\n\n\n

                        \n
                      1. Vakan\u0131n kuruma finansal etkisi tespit edildi mi?<\/li>\n\n\n\n
                      2. Ki\u015fisel veriler etkilendiyse verileri etkilenen ki\u015filer ve etkilenen veriler tespit edildi mi? Tespitler do\u011frultusunda veri \u00f6znelerine bilgilendirme yap\u0131ld\u0131 m\u0131?<\/li>\n\n\n\n
                      3. Vakan\u0131n tekrarlanmamas\u0131 i\u00e7in al\u0131nacak \u00f6nlemler belirlendi mi?<\/li>\n\n\n\n
                      4. Etkilenen sistemler vaka \u00f6ncesindeki sa\u011fl\u0131kl\u0131 yap\u0131ya d\u00f6nd\u00fcr\u00fcld\u00fc m\u00fc?<\/li>\n\n\n\n
                      5. Abac\u0131 Kart\u00a0 bilgi sistemleri politikalar\u0131 \/ prosed\u00fcrleri ya\u015fanan zafiyete ba\u011fl\u0131 olarak vakan\u0131n tekrar ya\u015fanmas\u0131n\u0131 engelleyecek \u015fekilde g\u00fcncellendi mi?<\/li>\n\n\n\n
                      6. Vaka ek bir politika \/ prosed\u00fcrle engellenebilir miydi?<\/li>\n\n\n\n
                      7. Vakaya bir politika veya prosed\u00fcr\u00fcn izlenmemesi mi sebep oldu?<\/li>\n\n\n\n
                      8. Vakan\u0131n en az zararla atlat\u0131lmas\u0131 i\u00e7in ortaya konan eylemler yeterli miydi? Sistemlerde herhangi bir iyile\u015ftirme yap\u0131labilir mi?<\/li>\n\n\n\n
                      9. B\u00fct\u00fcn sorumlular s\u00fcrece zaman\u0131nda dahil oldu mu?<\/li>\n\n\n\n
                      10. Ba\u015fka bir vakan\u0131n ya\u015fanmas\u0131n\u0131 engellemek i\u00e7in iyile\u015ftirme yap\u0131ld\u0131 m\u0131?<\/li>\n<\/ol>\n\n\n\n

                        23.1.      Sistem g\u00fcncellemeleri<\/p>\n\n\n\n

                        23.2.      Yaz\u0131l\u0131mlar\u0131n g\u00fcncellemeleri<\/p>\n\n\n\n

                        23.3.      \u015eifrelerin de\u011fi\u015ftirilmesi<\/p>\n\n\n\n

                        23.4.      Anti-vir\u00fcs yaz\u0131l\u0131m\u0131n\u0131n g\u00fcncellenmesi<\/p>\n\n\n\n

                        23.5.      Vakan\u0131n t\u00fcr\u00fcne g\u00f6re al\u0131nmas\u0131 gereken di\u011fer \u00f6nlemler<\/p>\n\n\n\n

                          \n
                        1. Bu vakadan neler \u00f6\u011frenildi?<\/li>\n\n\n\n
                        2. Ki\u015fisel veri, kanuni olmayan yollarla ba\u015fkalar\u0131 taraf\u0131ndan elde edildi mi?\u00a0(Cevab\u0131n \u201cEvet\u201d olmas\u0131 durumunda Abac\u0131 Kart bu durumu en k\u0131sa s\u00fcrede ki\u015fisel veri sahibi ilgiliye ve Ki\u015fisel Verilerin Korunmas\u0131 Kurulu\u2019na bildirir.)<\/strong><\/li>\n\n\n\n
                        3. (Varsa) Ki\u015fisel veri ihlaline y\u00f6nelik Ki\u015fisel Verilerin Korunmas\u0131 Kurulu\u2019na bildirim yap\u0131ld\u0131 m\u0131?<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

                          \u0130\u015fbu protokol, bir veri ihlali halinde Abac\u0131 Kart San. Tic. A.\u015e. \u2019nin (\u201cAbac\u0131 Kart \u201d) mevcut teknik, idari ve fiziki tedbirlerini belirlemek amac\u0131 ile haz\u0131rlanm\u0131\u015ft\u0131r. Abac\u0131 Kart \u2019\u0131n itibar ve g\u00fcvenli\u011finin zedelenmesinin \u00f6n\u00fcne ge\u00e7ilmesi ve do\u011fabilecek zararlar\u0131n Abac\u0131 Kart \u2019\u0131 etkileyen sonu\u00e7lar\u0131n\u0131n en aza indirilmesi ama\u00e7lanmaktad\u0131r. Veri ihlalleri her durumda m\u00fcmk\u00fcnd\u00fcr. Veri g\u00fcvenli\u011finin en \u00fcst… Read More »Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","neve_meta_reading_time":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"class_list":["post-1869","page","type-page","status-publish","hentry"],"yoast_head":"\nPotansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc - Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit<\/title>\n<meta name=\"description\" content=\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc - Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\" \/>\n<meta property=\"og:description\" content=\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/\" \/>\n<meta property=\"og:site_name\" content=\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/abacicard\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-27T11:31:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.abacicard.com\/en\/wp-content\/uploads\/2025\/01\/favicon.png\" \/>\n\t<meta property=\"og:image:width\" content=\"32\" \/>\n\t<meta property=\"og:image:height\" content=\"32\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@abacicard\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/\",\"url\":\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/\",\"name\":\"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc - Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\",\"isPartOf\":{\"@id\":\"https:\/\/www.abacicard.com\/en\/#website\"},\"datePublished\":\"2025-01-27T09:40:06+00:00\",\"dateModified\":\"2025-01-27T11:31:10+00:00\",\"description\":\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\",\"breadcrumb\":{\"@id\":\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/www.abacicard.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.abacicard.com\/en\/#website\",\"url\":\"https:\/\/www.abacicard.com\/en\/\",\"name\":\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\",\"description\":\"Y\u0131llar\u0131n Deneyimiyle G\u00fc\u00e7lu ve Karal\u0131\",\"publisher\":{\"@id\":\"https:\/\/www.abacicard.com\/en\/#organization\"},\"alternateName\":\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.abacicard.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.abacicard.com\/en\/#organization\",\"name\":\"Abaci Kart A.S.\",\"alternateName\":\"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit\",\"url\":\"https:\/\/www.abacicard.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.abacicard.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.abacicard.com\/en\/wp-content\/uploads\/2025\/01\/favicon.png\",\"contentUrl\":\"https:\/\/www.abacicard.com\/en\/wp-content\/uploads\/2025\/01\/favicon.png\",\"width\":32,\"height\":32,\"caption\":\"Abaci Kart A.S.\"},\"image\":{\"@id\":\"https:\/\/www.abacicard.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/abacicard\",\"https:\/\/x.com\/abacicard\",\"https:\/\/www.youtube.com\/channel\/UC09DwyAe-UeSqT71ZOvtb5g\",\"https:\/\/www.instagram.com\/abacicards\/\",\"https:\/\/www.linkedin.com\/company\/10275826\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc - Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","description":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/","og_locale":"en_GB","og_type":"article","og_title":"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc - Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","og_description":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","og_url":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/","og_site_name":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","article_publisher":"https:\/\/www.facebook.com\/abacicard","article_modified_time":"2025-01-27T11:31:10+00:00","og_image":[{"width":32,"height":32,"url":"https:\/\/www.abacicard.com\/en\/wp-content\/uploads\/2025\/01\/favicon.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@abacicard","twitter_misc":{"Estimated reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/","url":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/","name":"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc - Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","isPartOf":{"@id":"https:\/\/www.abacicard.com\/en\/#website"},"datePublished":"2025-01-27T09:40:06+00:00","dateModified":"2025-01-27T11:31:10+00:00","description":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","breadcrumb":{"@id":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.abacicard.com\/en\/potansiyel-veri-guvenligi-ihlali-protokolu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/www.abacicard.com\/en\/"},{"@type":"ListItem","position":2,"name":"Potansiyel Veri G\u00fcvenli\u011fi \u0130hlali Protokol\u00fc"}]},{"@type":"WebSite","@id":"https:\/\/www.abacicard.com\/en\/#website","url":"https:\/\/www.abacicard.com\/en\/","name":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","description":"Y\u0131llar\u0131n Deneyimiyle G\u00fc\u00e7lu ve Karal\u0131","publisher":{"@id":"https:\/\/www.abacicard.com\/en\/#organization"},"alternateName":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.abacicard.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.abacicard.com\/en\/#organization","name":"Abaci Kart A.S.","alternateName":"Abaci Kart A.S. - The First and Largest Manufacturer of Plastic cards, RFID cards, Plastic Game cards, MIFARE cards, Proximit","url":"https:\/\/www.abacicard.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.abacicard.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.abacicard.com\/en\/wp-content\/uploads\/2025\/01\/favicon.png","contentUrl":"https:\/\/www.abacicard.com\/en\/wp-content\/uploads\/2025\/01\/favicon.png","width":32,"height":32,"caption":"Abaci Kart A.S."},"image":{"@id":"https:\/\/www.abacicard.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/abacicard","https:\/\/x.com\/abacicard","https:\/\/www.youtube.com\/channel\/UC09DwyAe-UeSqT71ZOvtb5g","https:\/\/www.instagram.com\/abacicards\/","https:\/\/www.linkedin.com\/company\/10275826\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/pages\/1869","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/comments?post=1869"}],"version-history":[{"count":5,"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/pages\/1869\/revisions"}],"predecessor-version":[{"id":1901,"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/pages\/1869\/revisions\/1901"}],"wp:attachment":[{"href":"https:\/\/www.abacicard.com\/en\/wp-json\/wp\/v2\/media?parent=1869"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}