ESG Research 2019 - Industry specific (cybersecurity)

Your Name

Stock Code

Company Name

Part 1 Materiality

The company identified cybersecurity as a material ESG topic

The company mentioned cybersecurity in...

Part 2 Governance

There was a Board-level oversight of cybersecurity issues

The company described the managements role (including committee) in managing cybersecurity issues

Level of management regarding cybersecurity issues (with responsibility disclosed)

Part 3 Strategy

Did the company identify any cyber risks/ key threats of cyber risks over the short/ medium/ long term?

Did the company describe any impacts of cyber risks on the companys businesses, strategy and financial planning?

Did the company mention any strategies of managing cyber risks?

Part 4 Risk Management

Did the company disclose any company policies for cyber risk management?

Did the company describe the process ofidentifying, assessing and managing cyber risks?

Did the company conduct simulation exercises for cyber risk management?

Did the company set targets to manage cyber risks? (Directional/ Quantitative)

Any awareness-building campaign e.g. employee training?

Did the company adhere to any national/ international standards with respect to cyber/ information security?

The company adhered to...

Part 5 Reported Incident and Follow Up

Any reported incident relating to cybersecurity within the company?

Any reported incident relating to cybersecurtiy within the industry ?

Did the company mention how they responded/ improved to prevent similar incidentsin the future?