IT risk – cyber threats

The following may have a direct impact on the business continuity and reputation of the Group companies: 

• failures of key IT systems;
• effects of ransomware attacks;
• unauthorized access by cybercriminals through other activities to key management support systems, process control systems, as well as to unpublished, confidential data;
• the risk of confidential data leakage due to employees using artificial intelligence tools,
• other events in the area of ​​IT security.

In order to minimize this risk, the Group:

• develops and updates the systems used to ensure information security,
• regularly backs up key data;
• has very modern, extensive EDR anti-virus protection, cooperating with the monitoring centre, including: against phishing emails.
• has implemented IT security policies and principles of safe use of AI tools, as well as tools for electronic protection against uncontrolled sharing of confidential documents, i.e. AIP (Azure Information Protection).

The Group companies in Poland are constantly monitored by the IT security operations centre (so-called SOC, Security Operation Centre), which responds to security incidents.