Digital technology and highly connected economies and businesses bring new vulnerabilities from a proliferation of cyber threats. Cybersecurity threats evolve quickly and may include computer viruses, attempts to access information, denial of service and other breaches. It is commonly recognised that attempts to disrupt or improperly access Information Technology (IT) systems through cyber-attacks or otherwise may cause financial loss, reputational loss, business disruption, and/or data and proprietary information loss. We protect our data and systems including those entrusted to us. We also comply with all applicable data protection laws and regulations in the various countries we operate in. Cybersecurity is an enabler for our businesses. OUR APPROACH We Focus on People, Process and Technology We continue to strengthen our cyber and data resilience with a system of capabilities that comprises People, Process and Technology. This holistic approach manages cybersecurity risks and the associated data breaches by seeking to keep abreast of the threat landscape and environment. We also implement a multi-layered security framework to ensure there are relevant preventive, detective and recovery measures. We safeguard internal assets from emerging threats by extending our cybersecurity controls, conducting regular reviews of our digital footprints and carrying out regular cybersecurity exercises. Our employees are made aware that cybersecurity and data protection is everyone’s responsibility. We regularly train our employees on cybersecurity threats, data privacy and handling, relevant regulations, and best practices. Violations of cybersecurity and data protection policies by our employees will trigger mandatory remedial training, impact their performance evaluation and may result in disciplinary actions. We Prepare for Contingencies In the event of a cyber and/or data security breach, employees are required to follow the Group’s escalation process that is available on our corporate intranet. Additionally, we have a disaster recovery system in place across our core business operations that is designed to enable the recovery of data and the continuation of vital IT and business operations following disruptions caused by natural disasters, human error, technical failures or malicious third-party cyber-attacks. We continuously review and enhance measures designed to prevent, detect and respond to unauthorised activity in our systems against a constantly evolving cyber landscape and increasing sophistication of cybercriminals. GOVERNANCE CYBERSECURITY & DATA PROTECTION 72 ST ENGINEERING | SUSTAINABILITY REPORT 2024
RkJQdWJsaXNoZXIy ODIwNTc=