Our Commitment
The security of information, IT systems, digital products, and client data entrusted to TTMS is one of the key aspects of our business.
TTMS maintains and continuously improves its Information Security Management System (ISMS), based on a risk management approach and international best practices. The organization has implemented policies and processes that ensure the confidentiality, integrity, and availability of information, as well as the resilience of its digital services and products. This information is consistent with TTMS’s publicly available system policies.
Our goal is to ensure:
- the security of information and client data,
- the cyber resilience of the organization,
- the security of digital products,
- service continuity,
- supply chain security,
- compliance with legal and regulatory requirements,
- ccontinuous improvement of security processes.
Cybersecurity Contact Point
For matters related to cybersecurity, including the reporting of security incidents and vulnerabilities, please use the contact channels provided below.
Incident and Vulnerability Management
TTMS has established a formal process for the detection, classification, handling, and reporting of security incidents and vulnerabilities in accordance with the requirements of NIS2, the CRA, and the Information Security Management System. The process also includes communication with clients, relevant stakeholders, and competent authorities in the event of significant incidents and vulnerabilities.
Reporting Security Incidents
If you are a client, partner, or user and suspect a security incident involving TTMS services or products, please report the incident without delay to your product contact person in accordance with the applicable cooperation agreement, or complete the form below.
Reporting Security Vulnerabilities
Vulnerability Disclosure Policy
TTMS supports responsible vulnerability disclosure (Responsible Disclosure) and cooperation with security researchers, clients, business partners, and the cybersecurity community.
If you have discovered a vulnerability affecting any of the following:
- applications,
- cloud services,
- APIs,
- digital products,
- AI systems,
- testing environments,
- SaaS platforms,
- components delivered to clients,
please report it in accordance with the guidelines below.
act in good faith,