The rapid increase in computer networks and the use of the internet and the fact that they continue to increase have brought information security with it. At the same time, the fact that all institutions and organizations are dependent on technology and information has made information security vital. Information security is a corporate governance element and should be of high priority because it is closely related to information security, physical security, risk management, business continuity and compliance with laws and regulations, and thus supports various obligations to employees, business partners, customers and society. it is quite clear.