As we continue our digital transformation journey and further embed digitalization and information technology in our operations, it becomes increasingly vital that we protect our digital assets from cyber incidents that could harm our people, disrupt our processes or affect our systems. We are committed to building a resilient organization that can withstand and recover from any cyber incident. To that extent, our cybersecurity management system not only defines and prescribes key controls for implementing and maintaining cybersecurity posture but seeks to instill an agile and proactive mindset that aims to keep us ahead of cyber threats. Cybersecurity and data privacy We have established a robust threat intelligence function responsible for monitoring the cyber landscape and providing timely, actionable insights on threats or risks that may affect our business. Our cybersecurity operations center monitors and investigates suspicious activity around the clock and has been enhanced through automation. We have a dedicated incident response team to respond to and contain cyberattacks and a business continuity plan designed to protect business operations from disruptions or effects of adverse events. Our cybersecurity management system has been certified compliant with both national and international standards. Additionally, we have adopted or aligned with a range of other international standards and best practices. We regularly assess and monitor our digital footprint and posture, as well as the performance of our cyber defense, and implement proactive measures to mitigate potential digital risks or gaps. We generate and distribute compliance reports detailing remediation actions to management. Investment in our IT infrastructure is a priority to have in place effective and robust security measures. We continually monitor and evaluate the performance of our security systems, routinely testing their effectiveness and adapting them to enhance our capabilities and sustain our business resilience. We foster a culture of innovation in the cybersecurity domain, where we combine innovative technologies and solutions with modern processes, build new cyber capabilities and create a more resilient digital environment. To protect critical components of our supply chain from cyber threats and enhance their resilience, coverage of our cyber defense and response capabilities extends to our supplier network. Companies that wish to conduct business with us must register and comply with specific cybersecurity controls under our policies. We have formed alliances, both regionally and internationally, to collaborate with key industry partners to share and act on cyber threat signals. 138
ADNOC Sustainability Report 2024: Driving Progress & Prosperity Page 137 Page 139