We Prepare for Contingencies In the event of a cyber and/or data security breach, employees are to follow the Group’s escalation process that is readily available on our corporate intranet. Additionally, we have a disaster recovery system in place across our core business operations that is designed to enable the recovery of data and the continuation of vital IT infrastructure following disruptions caused by natural disasters, human error, technical failures or malicious third-party cyber-attacks. We continuously review and enhance measures designed to prevent, detect and respond to unauthorised activity in our systems against a constantly evolving cyber landscape and increasing sophistication of cyber-criminals. OUR GOVERNANCE AND FRAMEWORKS The Board has oversight on the Group’s cybersecurity strategy and cybersecurity topics are regularly reported to the RSC, AC and the Board. Cybersecurity in the Group is overseen by the Group Cybersecurity Committee which is chaired by the Group Chief Information Security Officer and supported by the GISO. The Group Chief Information Security Officer reports directly to the Group President & CEO. We ensure that our cybersecurity measures are in line with industry standards and put in place a Group Cybersecurity Management Procedure to guide our businesses. Our IT infrastructure and Information Security Management System takes reference from ISO 27001 – Information Security Management, National Institute of Standards and Technology, and other relevant industry standards. Our focus on data governance and protection in the Group is overseen by the Group Data Governance Committee which is chaired by the Group Chief Information Officer and comprises representatives from business areas and Group HQ functions. The committee provides oversight, and escalates key risks and violations on data governance and protection to the management in a timely manner. The committee also monitors changes in the regulations and recommends the adoption of relevant best practices. Our policies and procedures on data handling ensure compliance with all the applicable data protection laws and regulations. OVERVIEW OUR SUSTAINABILITY APPROACH ECONOMIC ENVIRONMENTAL SOCIAL GOVERNANCE INDEX 73
RkJQdWJsaXNoZXIy NjMyNDM=