The BDDK's and the Central Bank of the Republic of Türkiye's resilience expectations, and how ADVOX helps Turkish organisations put them into practice.
In force since 2020, it sets requirements for banks’ information systems, outsourcing, data location and electronic banking. Continuity and recovery of critical systems should be assessed against its current text.
BDDK ↗The CBRT publishes guides for payment institutions, including on external service providers delivering cloud services, which affect how continuity is planned for outsourced services.
CBRT ↗Recovery, backup and incident arrangements must protect personal data, including breach handling and the rules on where data is held and processed.
KVKK ↗The international management-system standard for business continuity, used by organisations in Turkey to structure and certify BCM programmes.
ISO 22301 overviewExamples from the last ten years of the kinds of events a business continuity programme should plan for.
Two major earthquakes struck south-east Türkiye, killing more than 50,000 people and damaging factories, ports and homes across eleven provinces. The World Bank estimated about US$34 billion in direct damage.
BCM lesson: Assess seismic risk for each site, protect people first, and keep alternative sites and suppliers for critical operations.
A magnitude 7.0 earthquake struck off Samos and badly hit İzmir, collapsing buildings and disrupting local businesses.
BCM lesson: Regular exercises and clear emergency roles reduce the time to account for staff and restore services.
Large wildfires on the Mediterranean and Aegean coasts forced evacuations and disrupted tourism, power supply and local business.
BCM lesson: Plan for evacuation, loss of access to sites and temporary relocation.
A sharp fall in the lira raised the cost of imported goods and foreign-currency debt, squeezing many Turkish companies.
BCM lesson: Include financial and supplier risk in your impact analysis and continuity strategies.
BCI CBCI certification training and specialist courses in business continuity, incident response, crisis management and resilience.
Tailored awareness and role-based training for leadership, continuity teams, business owners and operational staff.
A structured review of your BCM programme against the central-bank or sector rules that apply to you, with a prioritised plan to close the gaps.
Scenario-based exercises, plan validation, programme reviews, maturity assessments and continual-improvement support.
Business continuity standards, central-bank rules and other regulatory requirements for the countries ADVOX supports.
