This section, in accordance with the purpose of the top management of the organization; aims to establish a business continuity management policy that provides a framework for setting business continuity objectives, is committed to meeting applicable requirements and to the continuous improvement of the BCMS.

This policy is published within the organization via the intranet and on the company website and presented to the information of the relevant parties.

Our organization aims to make improvements and developments in the fields of "Technology solutions and Analytics", " Real world Evidence" and "Operational Excellence" in order take a leading role in its field. In this direction, studies related to business continuity will be implemented within the scope of operational excellence. Our business continuity policy and objectives have been established within this framework:

This policy sets out the Business Continuity Management approach, basic principles, organization and objectives. In the event of a crisis or disaster, it has prepared and implemented plans to ensure the continuity of critical business processes and services and to normalize all business processes and services within the planned period and in line with priorities.

With this policy, the top management declares its will to establish and implement an effective business continuity management system in line with legal requirements, national and international standards, stakeholder expectations and company strategies, to integrate it into the corporate culture and to continuously improve the system.

Our organization aims to establish, operate and develop a business continuity management system;

• To protect human health.
• To protect the reputation and image of the organization.
• To comply with the service delivery commitments (complete-correct-timely) given to our customers
• To comply with legal requirements
• To manage predicted and/or unforeseen service interruption events effectively and efficiently.

This policy aims to specify the basic principles and processes to cover the conditions for fulfilling its obligations to customers and other interested parties to perform its products and services in the face of events that cause business interruption (such as fire, earthquake, power outage, system outage, pandemic, cyber-attack), creating a loss of function or capability in one or more of the Personnel, Building and working environment, Information and communication technologies, machinery and equipment, printed and digital information assets and Supplier resources.

This policy is revised and updated once a year in ordinary situations, after a change in service delivery resources, an event that requires the operation of this plan, and other needs.

Within the scope of business continuity management, business continuity risks are evaluated, risks are reviewed regularly and systematically and necessary preventive measures are taken. It is carried out within the framework of the test program determined to control the adequacy of business continuity, and in this way, a reasonable level of assurance is provided for the continuity of activities.

Alternative communication channels have been created to ensure communication with the people served, alternative workspaces and system redundancy have been established to ensure service continuity. It acts in accordance with the following basic rules in line with the scenarios and strategies determined beforehand for extraordinary situations;

• In an extraordinary situation, priority is given to the safety of people.
• Emergency Plan related procedures are implemented in extraordinary situations that physically affect the building and working environment.
• End-to-end business continuity management is managed according to the event management flow and interactions specified in the business continuity management plan.
• Systems and data supporting the processes determined as a result of the analysis conducted with the business units are backed up in the secondary data center.
• Preventive measures are taken by conducting risk assessment studies for personnel, building and working environment, Information systems and components, Machinery and equipment, Information assets and suppliers, which are the sources of service realization.
• Business continuity scenarios and strategies are prepared for the loss of personnel, building and working environment, Information systems and components, Machinery and equipment, Information assets and suppliers, which are the sources of service realization. Strategies specify what will be done in the event that there is no loss of capability (function) in the resources.
• Job recovery times are divided into time slots: “Maximum Tolerable Period of Disruption (MTPoD)” and “Recovery Time Objective (RTO)”.
• Business continuity solution strategies basically consist of one or a combination of the following 6 methods:
  • Working in alternative work areas (DRC for systems, other production areas for the working environment, home and other areas to be determined according to the needs of the current situation),
  • Working by reducing the capacity (staff and process set) in the current environment,
  • Use of reserve personnel,
  • Working with alternative supplier,
  • Working with backup hardware (user hardware and system infrastructure hardware) in Information Systems,
• The decision on the selection of methods in business recovery activities, transition to DRC and returning to normal from DRC belongs to the Business Continuity Crisis Management Committee.
• Within the scope of business continuity, regular awareness trainings are given to existing and newly recruited personnel. Tests are also used for knowledge and skill training purposes.
• It is ensured that business partners or suppliers have business continuity plans for extraordinary situations and supplier audits are carried out periodically.

In the event that business continuity is interrupted, and business continuity plans are put into use, informing and communicating with customers will be provided by centrally sending e-mails to all customers, by means of press or social media statements. In case of a situation requiring a press release, IQVIA global media relations teams must be informed and the final approval of the text to be published must be obtained.