Process and Infrastructure

Moreover, GC have conducted the Vulnerability Assessment (VA) and develop the Business Continuity Plan at least twice a year, in order to prepare for hacking incident. In 2020, GC tested the robustness of "Cyber Incident Response Tabletop Exercise" by simulating events (tabletop exercise) from cyberattacks with data leakage and hacking that could disrupt business operations and affect reputation.

In the case of such threat the Cyber Security incident Response Team (CSIRT) which consist of the TF-IT VP, IFM and the Infrastructure Architecture function will be responsible for governing and supporting operating team in respond to providing actions to control incidents. The Security Operation Center team (SOC Team) and CSIRT Commander, in cooperation with PTT Digital Network team is also formed to analyze and investigate root-cause of the incident occurred, prepare incident management process and reports to relevant parties to provide mitigation actions. SOC Manager will review the incident report and then proceed to approval of corrective actions further.

In addition to readiness of potential cybercrime, penetration tests and internal and external vulnerability assessments are conducted every six months (two phases) to prepare proactive actions and mitigation measures. GC defines vulnerability severity at three levels, including high, medium and low.