Our RISE sustainability strategy inspires us to be best-in-class, holding us to the highest standards of ethics, transparency and sustainability. As a leader in responsibly managing our integrated resorts, we aim to inspire our guests to realize that a sustainable future is a better future
Ethics & Integrity
Our Board and leadership teams are the driving force behind a culture of excellence, emphasizing accountability, professionalism and transparency across all organizational levels. Motivated by our RISE sustainability strategy, we take pride in our status as a responsible corporate citizen, deeply committed to our people, community and the planet.
OUR TARGETS
- Ensuring 100% of colleagues receive training on ethical conduct
- Maintaining zero cases of ethical violations along our value chain
- Remediating 100% of any ethical violations along our value chain
Privacy & Cybersecurity
Our guests, colleagues, suppliers, partners, regulators and other stakeholders entrust us with their personal and corporate data. In an era where technology is integral to operations, we are vigilant in maintaining stringent controls and systems.
OUR TARGETS
- Maintaining zero incidents of leaks, theft or loss of data
- Responding to any incidents of unauthorized access to systems and data by containing the negative potential impact to our stakeholders and business, and continually reviewing to ensure we have appropriately stringent safeguarding controls
- Ensuring our Board and all relevant colleagues are trained on information security and data protection
Melco has integrated information security response, crisis and business continuity arrangements - including crisis management and disaster recovery procedures - to manage and mitigate impacts and to support the resumption of business operations promptly following information security incidents.
Regular vulnerability analysis is conducted to promptly address any identified vulnerabilities. Our Information Security Management System, which is ISO 27001-2002 certified and audited annually against this standard, includes a vulnerability management process. This process encompasses regular assessments, vulnerability scanning, and penetration testing to identify and mitigate potential risks.
The Group Cybersecurity internal audit is based on scope and coverage as determined by Internal Audit and Internal Control Compliance department. Audits include Network and Internet Security, Internet of Things (“IoT”) control review, Network Capacity Planning control review, CRM Replacement project, Macau Cybersecurity Law and SEC Incident Reporting requirements and penetration tests.
