Digital Transformation
One of the key components of GC’s sustainable business operations is building resilience in adaptation amidst rapidly changing circumstances (Business Resilience). GC is implementing Digital Transformation to transform its business, technology, and workforce, ensuring readiness for the digital era. The objective is to enhance efficiency, productivity, and agility while reducing business risks through the "Triple Transformation" strategy, which consists of:
- Business Transformation – Collaborating with various business units to develop digital technology application projects (Digital Use Cases) to improve operational efficiency.
- Technology Transformation – Enhancing the readiness of IT systems to align with the adoption of future technologies.
- People Transformation – Enhancing or adjusting employees' skills (Upskilling/Reskilling) to ensure they are prepared to use technology.
Under this strategy, three key initiatives have been implemented: Cybersecurity, which focuses on ensuring digital security; Advanced Analytics in Every Function, which integrates advanced data analytics across all work areas; and Smart Workplace, which aims to promote a more efficient and technology-driven working environment.
Cybersecurity
Objectives and Goals
The Cybersecurity initiative aims to enhance the company's business capabilities to align with current challenges while safeguarding critical company data and infrastructure. This covers technology, processes, and personnel to ensure comprehensive security measures.
Technology and Processes
GC has adopted Best-in-Class Cybersecurity Solutions and Practices and has established a robust IT security management framework. This framework aligns with the company’s Information Security Policy and complies with ISO 27001 standards and guidelines from the National Institute of Standards and Technology (NIST), USA.
Personnel Development
GC continuously enhances cybersecurity awareness among employees through education and regular testing, ensuring they can recognize and respond to cyber threats effectively. Key performance indicators include zero employees falling victim to cyberattacks after completing the Cybersecurity E-Learning Course and achieving higher Phishing Email Reporting Rates than the industry average. Additionally, GC has established an Information Security Management System (ISMS) Operation Team, which meets monthly to oversee and strengthen cybersecurity measures across the entire organization.
Implementation Details
- Upgraded security practices and technologies to protect data, including personal data protection.
- Strengthened IT system and application access controls to enhance security.
- Conducted security assessments and penetration tests by experts to ensure resilience against cyber threats.
- Improved cyber threat detection and analysis systems for increased accuracy.
- Supported remote work security through Secure Access Service Edge (SASE) cloud-based security solutions, protecting employees from cyber threats outside the workplace.
- Conduct cyber threat response drills at least once a year to ensure timely and effective incident handling.
- Enhanced cybersecurity monitoring through the Security Operation Center (SOC) operated by PTT Digi for continuous threat surveillance.
- Implemented the Incident Management System (IMS), a real-time 24/7 monitoring and alert system accessible via a smartphone application.
- Information Technology Security Policy: Improving the terms and conditions of IT technology security to be more relevant and ready-for-use. Furthermore, employees are required to acknowledge the conditions as the company has included some important lessons in policies in animated form to make it easy to follow and understand.
- Cybersecurity e-Learning: This e-learning and teaching material allows employees to understand all forms of cyber threats and risks that may occur so they can immediately handle any incidents.
- Cybersecurity Campaign: Aims to build engagement among company employees via communications channels such as emails, posters, or communications from supervisors, all of which increase awareness about the importance of cyber threats.
- Phishing Test: Simulates possible scenarios and provides solutions so employees can be aware of and handle phishing and cyber threats.
Risk assessments and improvements in the planning of security systems for OT, such as:
- Assessing and improving the firewall system so it operates accurately and correctly.
- Utilizing the ‘Centralized Backup System.’
- Improving processes, procedures, and technological applications to update operating systems and malware protections so they work more efficiently.
- Improving processes and the applications of technologies to ‘secure remote access and file transfers.’
- Applying ‘asset management and anomaly detection.’
Performance and Results
- No cybersecurity threats or data security complaints were reported in 2020.
- Phishing Test results (conducted on over 7,500 employees).
of employees passed the test,
showing an 8.5% improvement from 2019.
of employees successfully reported phishing attempts,
an increase of 12.56% compared to 2019.
Data as of April 2021
Advanced Analytics in Every Function
Objectives and Goals
Advanced Analytics in Every Function (AA in Every Function) aims to develop employees' capabilities in advanced data analytics, preparing them for a transition toward a Data-Driven Organization. GC promotes awareness of the importance of data across the organization, ensuring employees understand data collection and utilization through advanced analytics methods. This approach enhances efficiency while mitigating risks in operations.
Implementation Details
1. Communication on Advanced Analytics – Implementing the communication concept under the name "รวย/ Ruay", an acronym for รวบรวม (Collect), วิเคราะห์ (Analyze), and ยกระดับ (Elevate). This initiative enhances employees’ ability to collect, analyze, and elevate data usage by sharing insightful content on data analytics, including practical examples to improve understanding.
2. Initiated the creation of an Online Community called "Ruay Café" as a gathering place for employees interested in data analytics and those pursuing Data Science courses. This platform serves as a channel for exchanging knowledge and sharing experiences on applying data in work among colleagues.
3. GC organized Data Science courses for employees interested in learning about data utilization through data analytics technology. In collaboration with VISTEC and True Digital Academy, GC designed the curriculum to align with the diverse ways employees apply data in their respective fields.
Performance and Results
2020
There were 75 and 29 GC Group employees enrolled in the Data Science & Engineering Program Levels 1 and Level 2, respectively. All participants were required to apply data analytics in their operations through ‘Digital Use Case’ projects. In this two-year period, there were 45 projects worth over 300 million baht whereas all projects involved the four following operations in data analytics:
- Optimization is carried out under any condition using complex equations to improve machinery functions to maximize effectiveness.
- Predictive Maintenance predicts machine breakdowns using past data and data derived from machine monitoring processes to come up with maintenance planning.
- Price Forecasting predicts the cost of materials using past data.
- Sentimental Analysis analyzes messages through contextual mining of text to understand both problems and needs.
GC anticipates that employees throughout the organization will gain a better understanding of advanced analytics and participate in related activities applying their knowledge in their operations and further initiating projects that add value and reduce costs in the organization.
Data as of April 2021
Smart Workplace
Objectives & Goals
The "Smart Workplace" initiative represents a new way of working. The company optimizes workspace design and management by integrating technology and automation to enhance employee convenience and efficiency.
As of January 2021, GC initiated a Proof of Concept (POC) with 20 employees at the Energy Complex Building, testing two key systems: a Face Recognition System, which replaces employee ID cards with facial scanning for building entry to reduce physical contact and enhance safety during the COVID-19 pandemic, and a Seat Reservation System, a web application that enables employees to reserve office seats, improving office space management and increasing usable workspace. In the future, GC plans to introduce additional technologies to enhance employee convenience further and advance the Smart Workplace concept.
Performance & Outcomes
GC anticipates that the Smart Workplace initiative will:
- Enhance office space management efficiency
- Reduce rental costs
- Improve employee convenience and work efficiency
Data As of April 2021