.tmb-media_pane.webp?Culture=en&sfvrsn=3e996df9_1)
As our sector becomes increasingly reliant on interconnected systems, automation and data-driven operations, robust cyber and digital security controls are essential to protect our people, assets and information.
Cyber resilience
Cyber security breaches are a material risk to our business. Our proactive approach includes identifying and assessing risks, and taking steps to reduce the likelihood and impacts of an incident
Privacy
We respect and work to protect the privacy and personal information of individuals
Artificial intelligence
We recognise the potential for safe, well-governed AI to enhance the safety and productivity of our business
The key elements of our approach to keeping our systems secure, protecting people’s privacy and using AI responsibly are outlined below.
Our Group-wide cyber security program is designed to uplift capability and reduce exposure to cyber threats through effective controls.
The controls we implement are designed and operated in alignment with the National Institute of Standards and Technology Cybersecurity Framework, an international best practice standard for information security controls.
Material security breaches are managed under our internal cyber incident response plan. No significant cybersecurity breaches, either withinour technology environment or via third parties, have occurred in the past three financial years.
Our proactive approach includes identifying and assessing risks and taking steps to reduce the likelihood and impacts of an incident.
Key elements of our approach include:
We understand the importance of the personal information entrusted to us.
Protecting people’s personal information and being transparent about how we use it are essential aspects of the way we do business.
We take a risk-based approach to AI, supported by governance and internal controls to enable its responsible development and deployment.
Our approach is guided by four strategic pillars:
In FY25, we assessed our alignment with several national and international responsible AI frameworks, including the European Union's AI Act, the Australian Government’s Voluntary AI Safety Standard, the Australian Institute of Company Directors' governance principles, and frameworks developed by Alphinity Investment Management and the Commonwealth Scientific and Industrial Research Organisation (CSIRO).
We continue to strengthen our approach to align with these and other emerging standards.
