IRPC One Report EN

IRPC’s Cyber Security Roadmap is based on components of the NIST Cyber Security Framework. The Company has already put in place cyber security work plan for 2021-2025, applying modern technologies to upgrade its cyber security operations, for example, Operational Technology, which is an innovative technology to help protect and secure the company’s operational processes. IRPC is the first company in the PTT Group to deploy Operational Technology (OT) to safeguard against cyberattacks. OT detects and manages industrial/ manufacturing processes, assets, and equipment. The Company plans to expand OT to other companies within the PTT Group in the future. Key success factors of IRPC’s Cyber Security are as follows: 1. Process Excellence: Cyber security policy formulated in accordance with international standards, such as ISO 27000, and the role of the security operating model clearly defined, along with the introduction of disaster recovery plan and establishment of monthly review of cybersecurity incidents 2. Technology Excellence: Installing equipment for protection against cyber threats and 24-hour surveillance 3. People Excellence: Creation of a CSIRT committee to oversee cybersecurity operations and appointment of a Change Agent to communicate information relating to digitalization or setting up a club for digitalization knowledge exchange 130 IRPC PUBLIC COMPANY LIMITED 56-1 ONE REPORT 2021

RkJQdWJsaXNoZXIy ODg4NTI=