Cybersecurity Measures

GC has established information security-related business continuity plans and taken preparational steps by conducting a cyber threat management exercise and performed cyber-attack risk assessments to enable risk monitoring and serve as a warning signal for operations. In addition, an escalation process has been established to allow employees to report incidents, vulnerabilities, or any suspicious cyber activities.

Escalation process for reporting cybersecurity incidents or suspicious activities

Moreover, the company developed Key Risk Indicators (KRI) in all three dimensions, namely People, Business and Technology to monitor the performance of information and cyber security operations.

Furthermore, GC promotes a culture of shared responsibility for information security across the entire organization by establishing clear guidelines and policies. These are designed to ensure that all employees are aware of the importance of protecting data and understand their individual responsibilities in maintaining information security. The company also defines information security requirements for third parties who access its data or systems to ensure that all stakeholders adhere to the same security standards. GC also promotes knowledge on the secure use of information technology in tandem with information security/cybersecurity awareness trainings and data privacy via Infographics and E-learning to enable implementation in operations or the daily life by employees, contractors, suppliers (feedstock and non-feedstock), customers and authorities or individuals acting on behalf of GC across the supply chain.