At LDC, we want our stakeholders to feel confident about the privacy and security of personal data held by the Group. Against a global rise in increasing sophisticated cyberattacks, LDC continually reinforces its data privacy and cybersecurity strategy to mitigate cyber threats and ensure comprehensive protection of our facilities and IT systems.

Staying Vigilant & Secure

Although we were not impacted by any major cyber event in 2022, this has not deterred efforts to fortify our data privacy and security measures. We have successfully implemented an advanced cybersecurity suite that incorporates best-in-class security and compliance capabilities, and which has significantly enhanced the protection of our systems from potential threats.

Moreover, we have reinforced and extended the coverage of our 24/7 security operations, which monitor information systems for cyber events. We remained focus on cultivating a culture that emphasizes the importance of cybersecurity hygiene among employees, via trainings and monthly phishing simulations.

Adhering to Industry Benchmarks

The US National Institute of Standards and Technology (NIST) has developed a cybersecurity framework that encompasses five key categories aiming to bolster cybersecurity risk management for businesses of all sizes.

In 2022, we undertook a comprehensive update of our cybersecurity policies, aligning them with the NIST framework categories and their objectives, which are integral to our operations:

• Identify: Cultivate an organizational understanding to risk on system, data and process.
• Protect: Implement safeguards to protect infrastructure and data.
• Detect: Establish activities for timely identification of cybersecurity events.
• Respond: Formulate actions to address detected cybersecurity incidents.
• Recover: Maintain resilience strategies and restore process.

By diligently implementing measures aligned with these categories, LDC continues to strive for the highest levels of data security and privacy, adapting to a continually evolving cybersecurity landscape.