The Role of Colleagues
and Partners

Information security is part of our Code, our corporate governance policies and our training for all colleagues, at all levels of the Group. We regularly update employee guidelines on data protection in our respective regions and run awareness campaigns about phishing attacks. We also assess if additional training is required and regularly release further guidance on personal data retention through circulation of the corporate policy and updated guidelines on data privacy and document retention.

Our security risks are not limited to our systems. They are extended to the systems and processes of our partners and suppliers. In our partner and supplier selection processes, cybersecurity requirements and ongoing testing are required. Vendors who fail to meet our high standards are notified and all IT providers must comply with the ISO 27001 standard. We also work with partners to share information on cybersecurity threats and hacker tactics.