Services
KVKK Technical Consulting
We review your systems that process personal data from a technical point of view, list the missing technical measures and help apply them. Legal assessment and statements are outside this service; for that, we recommend working with a legal expert.
- Technical assessment
- Gaps in technical measures and an improvement plan
- Works alongside your legal advisor
In brief
In KVKK (Turkish personal data protection law) technical consulting, 7 Tepe Bilişim reviews your systems that process personal data from a technical point of view, lists the missing technical measures and helps apply them: access permissions, backup, logging and encryption, for example. We can apply the measures set by your legal advisor together with you. Assessing whether you are in line with the law, legal opinions and preparing policies or privacy notices are outside this service.
Is this for you?
A good fit if
You want to see technically which systems hold your personal data and how they are protected. You are looking for IT support to apply the technical measures set by your legal advisor. You want an improvement plan on topics such as access permissions, backup, logging and encryption.
Not a fit if
You expect a document saying you are "in line with KVKK" or a legal opinion; this service does not provide them. You expect us to prepare legal documents such as policies, privacy notices or VERBİS (that is the legal expert's job).
What we offer
We work in 5 areas; the quote lists item by item which of them are in scope.
Technical assessment
Listing the servers, applications, shared folders and devices that hold personal data.
Technical input to the data inventory
A technical table of which system the data sits in, where, and with whose access.
Technical measure gaps
A list of gaps in access permissions, authentication, encryption, backup, logging and updates.
Improvement work
Applying the technical measures that are decided, in a priority order set with you.
Awareness training
Information security and personal data awareness training for employees (a separate item).
How it works
Scope meeting
Which units, which systems; if you have a legal advisor, we clarify how we relate to them.
Technical assessment
Together we list the systems and the access.
Reporting the gaps
We write the technical measure gaps in priority order.
Improvement
We apply the measures that are agreed.
Closing meeting
We summarize what was done and what remains.
What we deliver and what is out of scope
What we deliver
- Technical assessment report
- Technical measure gap list and improvement plan
- Record of the changes applied
- Closing meeting
Out of scope
- Legal opinion, a statement or document saying that you are in line with the law
- Preparing legal documents such as policies, privacy notices and explicit consent texts
- Registration and notification procedures with the Turkish Personal Data Protection Authority (KVKK Authority)
- Correspondence with and representation before the Authority
Frequently asked questions
If your question is not here, write to us; we will clarify the scope together.
Ask a questionWill this get us in line with KVKK?
Whether you are in line with the law is a legal assessment and is outside this service. We help you apply the technical measures.
We have a legal advisor; do we work together?
Yes; applying the technical measures set by your legal advisor is a suitable way to work.
Do you provide training?
Awareness training for employees can be planned as a separate item.
What is the price?
It is given with a quote, based on the scope.
Related services
Cyber security
Cyber Security
Penetration testing
Penetration Testing
Let's define the scope together.
Tell us what you need; we will set the scope and the quote together.