Page 37 - Tata Steel One Report 2024-Eng-Ebook HY

Business Operation and Performance Driving Business Towards Sustainability Corporate Governance Policy Financial Statements Attachments
Information Security Risk
The Company uses various digital platforms for interactions with the customers, suppliers and other stakeholders, and needs to secure the IT systems and infrastructure vulnerable to cyber-attacks.
Breach of information security due to cyberattacks, Non-compliance to IT legislations and regulations may lead to business disruption and imposition of penalties.
Mitigation strategies
The Company is aware of the risks and undertakes prevention of its IT network and end point IT equipment. Mechanisms are in place to capture alerts and triggers from external sources and any information security related incident. In the cyber security environment, the security paradigm shifts from protection of our boundary at data center and enterprise network to protect the vanishing boundary from Bring-Your-Own-Device (BYOD), cloud-based applications and Internet of Things (IoT).
TSTH has made improvement from various technologies, as explained below, to reduce the risk: • Use of Firewall and wireless control to protect against threats and control access to
the network system of Endpoint devices.
• Use of Zscaler Internet Access (ZIA) to prevent the use of dangerous web sites while
working from home.
• Microsoft Defender ERD Antivirus installed on client computers for real-time protection
against malware, ransomware, and risky behavior.
• Application of two-factor authentication with Microsoft 365 product, VPN and Tata
steel Thailand web services
• Application of sensitive label function in Microsoft 365 to prevent data leak from company
• Controlling the use of USB storage devices by allowing only authorized users to use them.
• Encryption of data on hard disk to prevent data leak in case the computer is lost.
• External system penetration testing by world-class experts to find vulnerability and
corrections.
• Regular software patching to prevent vulnerability
• TSTH has appointed a PDPA Committee, a Personal Data Protection Officer (DPO) and
Data Controller to comply with the Personal Data Protection Act.
Human resource risks
The risks associated with an aging society and increasing human resources costs are challenges faced by many organizations in Thailand, particularly in labor-intensive industries such as the steel industry
Mitigation strategies
The company aims to attract a new generation of talented and knowledgeable individuals to join the organization, while simultaneously implementing strategic workforce planning to bring down the overall average age of employees. For example, the company has initiated programs such as the Engineer Trainee and Diploma Trainee, which recruit fresh graduates to join the company. These programs provide rotational training across various departments in the initial phase, allowing trainees to gain a comprehensive understanding of the entire business process before being placed into specific roles. In the future, the company also plans to collaborate with educational institutions to build a pipeline of young talent.
The company focuses on developing employee potential in alignment with age diversity by enhancing essential future skills through job rotation, knowledge sharing, and hands-on training. Special attention is given to re-skilling and up-skilling older employees, enabling them to continue contributing value in roles that suit their experience and specialized skills. In addition, the company recognizes the importance of health and well-being programs tailored to different age groups, aiming to enhance overall workforce effectiveness. The company also promotes an inclusive organizational culture that attracts and retains employees of all ages. This includes activities that foster intergenerational connections, such as Buddy programs, mentoring, and cross- generation initiatives.
The company continues to review its organizational structure, manpower models, and explore alternative workforce solutions, such as contract or temporary staff. At the same time, the company is investing in internal employee development to enhance skills and work efficiency, to offset rising labor costs.
56-1 One Report 2024-25 35