Data and Information System Security
Supporting the Sustainable Development Goals
Targets
- Communicate and raise awareness of data security and information systems within the organization to employees at all levels 100%
- Computer systems and networks operate continuously 100%
- Computer system intrusion 0 cases
Performance
Challenges and Opportunities
Data security and information systems security are fundamental factors that are important for sustainable business operations in the digital era. Turnkey Communication Service Public Company Limited (“TKC”) recognizes that cyber threats are continuously increasing in both frequency and complexity, arising from external attacks, risks from internal personnel, and the adoption of new technologies, which require careful governance in security and data protection, especially in enhancing awareness and understanding of employees. Without consistent communication and training, vulnerabilities in the organization’s information systems may occur.
At the same time, the Company has opportunities to create added value from systematically developing cybersecurity systems and processes through the establishment of clear policies and practices, together with continuous communication and knowledge enhancement for employees at all levels. This will help reduce risks from cyber threats, strengthen confidence among stakeholders, and support business growth as well as stable and sustainable operations.
Management Approach and Value Creation
The Company has established policies, practices, and security measures for information technology to cover operations in both system administrators and users, with the objective of creating strong security standards, preventing risks, and supporting efficient operations under a clear governance framework, which consists of:
Part 1: Information Technology Control and Management
To ensure that the Company’s information technology systems operate efficiently, securely, and continuously support employees, the Company has established IT control and management practices to prevent potential threats. These measures serve as standards and operational guidelines for all personnel in the Information Technology Department and include the following:
- Assignment of roles and responsibilities
- Access control to the computer center and server rooms
- Control of access to information and communication technology systems
- Information security management
- Information system development control
- Information system data backup
- Emergency response and contingency support
- Incident resolution and reporting procedures
Part 2: Information Technology Usage
The Company has also established guidelines for employees regarding the appropriate use of information technology, including:
- Control of IT usage
- Computer usage policies
- Use of computer networks and user accounts
- Use of electronic mail (email)
- Internet usage policies
- Data protection and maintenance on computers
- Computer virus prevention
- Responsible use of Artificial Intelligence (AI) within the organization
The Company has plans to continuously develop content and update case studies on cybersecurity, by including such courses in the annual training process and new employee orientation, in order to ensure that personnel at all levels are aware and capable of effectively responding to cyber threats.
