At EMP, we are deeply committed to cyber security and effective cyber risk management. Our IT team consistently enforces strict information security protocols and data management practices to safeguard the confidentiality of company data and reinforce our defense against evolving cyber threats.
Throughout 2024, there have been no recorded data breaches or cyber attack incidents.
Disaster Recovery Planning
Currently, our IT team performs daily backups to an immutable data platform. Recognizing the importance of business continuity, we are in the process of developing a proactive Disaster Recovery plan. This includes the establishment of a separate Disaster Recovery Center (DRC). These measures are crucial to ensure that our operations continue smoothly and securely, even in the face of cyber threats or potential disasters.
Data Governance
EMP is implementing a data handling policy that categorizes data into four levels: public, internal, confidential, and restricted. This classification system helps apply appropriate security measures for each type of data. Additionally, the policy clearly defines the methods and technologies approved for transmitting and receiving data, ensuring that information is shared securely both within and outside the company.
Endpoint Security
All company devices are equipped with the latest antivirus software and continuous monitoring tools. This proactive defense mechanism is crucial for detecting and neutralizing real-time threats, forming a fundamental part of our cyber security strategy. We are also in the process of enhancing our cyber threat monitoring model towards a more proactive Security Operations Center.
Network Security
EMP’s network security is reinforced by comprehensive firewall solutions, which monitor all inbound and outbound network activities while allowing flexibility for work operations. These firewalls act as barriers against unauthorized access and attacks, ensuring that our network remains secure.
Password Management
EMP’s password policy requires all passwords to be changed every three months and meet password strength requirements. This policy prohibits the reuse of previous passwords, helping to prevent unauthorized access due to compromised or reused passwords.