Cyber security and Turkey: Organizational structure, implementations and future

The main purpose of this thesis is to analyze the cyber security practices - applications and organizational structure in Turkey within the framework of the management of possible future national, regional or global cyber security crises. In order to achieve this aim, the study is composed of five main parts. In the first part, the purpose, subject, aim and scope of the research are explained. In the second part, the method used, data collection and data analysis are explained. In the third part, the basic concepts and theoretical framework of the research are presented. In the fourth part, how the concept of cyber security has expanded in the historical process and its current situation are discussed. In the fifth chapter, the research findings are explained, discussed and analyzed. In addition, the cybersecurity crise in Turkey is discussed. This research has been completed with the conclusion and evaluation part, which includes the overall research results and proposals. It has been determined that the approach to cyber security in Turkey is affected by the general security perception of the country. The cyber security practices and organizational structure in Turkey are developed at the level of cyber incident management. But they are not at the required maturity level for the solution of comprehensive security crises. As a result of research findings, it has been evaluated that giving more space to the training of human power and the realization of the necessary legal arrangements in accordance with the new situation of cyberspace will increase the level of resilience against possible cyber threats and risks in the future. It has been concluded that the management of the cyber security organizational structure in Turkey should be carried out by a cyber security authority that has the necessary legal sanction power and should be equipped with an independent audit function.