# Information Security Guide

Source: https://s3msecurity.com/compliance/information-security-guide/
Last updated: 2026-11-12

S3M supports the network, guest, identity and device measures of Türkiye’s Information and Communication Security Guide. ConnGuard NAC discovers devices and authenticates them at each port with 802.1X, SpotGate isolates and identifies guests, CityGate segments networks, EndGuard checks phones and tablets, and SAMI keeps audit-ready records.

**Information and Communication Security Guide (Bilgi ve İletişim Güvenliği Rehberi), version 1.1.** Applies to: Public institutions in Türkiye and operators that provide critical infrastructure services. Official text: https://siberguvenlik.gov.tr/faydali-dokumanlar/detay/bilgi-ve-iletisim-guvenligi-rehberi

## How S3M supports it

| Article / control | What it asks | How S3M supports it | Products |
| --- | --- | --- | --- |
| 3.1.1.4 | Use active discovery tools to find the hardware on the network. | ConnGuard NAC discovers every connected device, managed, IoT or BYOD, and records what it is. | ConnGuard NAC |
| 3.1.1.7 | Authenticate devices at the organization’s network connection points, for example with 802.1X or NAC. | ConnGuard NAC authenticates users and devices at each connection point with 802.1X and RADIUS. | ConnGuard NAC |
| 3.1.6.6 | Isolate networks: separate network layers and control access between segments. | CityGate segments without VLANs, and APNZone isolates mobile devices on private APN. | CityGate, APNZone |
| 3.1.6.10 | Keep guests on an isolated network, verify their identity before they connect and log their access. | SpotGate keeps guest traffic apart, identifies each guest by SMS, OAuth, voucher or sponsor and stores guest sessions. | Spotgate |
| 3.1.8.4 | Keep detailed logs and protect their integrity. | SAMI keeps audit-ready records of network access. Time-stamping the logs for integrity stays with your log system. | SAMI |
| 3.1.12 | Set an access policy, give users unique accounts and authenticate them. | ConnGuard NAC and CityGate enforce access policy by identity, and EndGuard binds each device to its user. S3M does not provide multi-factor authentication. | ConnGuard NAC, CityGate, EndGuard |
| 3.3.1 | Let only approved, up-to-date phones and tablets reach the network. | EndGuard checks device posture, and ConnGuard NAC keeps devices that fail the check off the network. | EndGuard, ConnGuard NAC |
| 3.4 | Secure the IoT devices connected to the network. | ConnGuard NAC identifies IoT devices and limits each one to what its policy allows; APNZone does the same for cellular IoT by SIM. | ConnGuard NAC, APNZone |

S3M supports these requirements with technical controls. This is not legal advice or a certification; confirm legal questions with your counsel.

Checked against the official text on 2026-11-12.

## Frequently asked questions

### Who must follow the Information and Communication Security Guide?

Public institutions with an IT unit, or with IT run under contract, and operators that provide critical infrastructure services in Türkiye.

### Which version does this page use?

Version 1.1, dated March 1, 2026, published by the Siber Güvenlik Başkanlığı, which took over the guide from the former Digital Transformation Office.

### Does S3M cover the guide’s multi-factor and URL filtering measures?

No. S3M does not provide multi-factor authentication or URL filtering, so measures such as 3.1.12.15 and 3.1.6.21 need other tools.