Cybersecurity and Data Protection

Charoen Pokphand Group's management approach to cybersecurity and data protection is rooted in a proactive, holistic, and risk-based strategy that prioritizes the protection of sensitive information across all its business operations and subsidiaries. Recognizing the rapidly evolving landscape of cyber threats, the Group places strong emphasis on continuous improvement and innovation in its security protocols. It adopts a forward-thinking mindset, anticipating emerging digital threats and adapting its defenses accordingly.

At the core of this approach is a comprehensive security vulnerability analysis framework, which enables the Group to identify, assess, and remediate potential weaknesses across IT infrastructure, applications, user behavior, and third-party access points. The Group conducts periodic vulnerability assessments and penetration testing, both internally and via third-party experts, to uncover exploitable system flaws before they can be used maliciously. Findings are used to prioritize mitigation strategies, informed by impact severity and likelihood of exploitation.

This analysis is integrated into a broader risk management system, which incorporates technological, human, and external threat factors. By understanding where vulnerabilities lie—from outdated software and misconfigured systems to phishing susceptibility and supply chain risks—the Group is able to implement multi-layered defense mechanisms tailored to its risk landscape.

To strengthen its organizational resilience, the Group also fosters a culture of cybersecurity awareness and shared responsibility. Employees, contractors, and suppliers are regularly trained on phishing prevention, password hygiene, and incident reporting through e-learning modules, workshops, and simulated attacks. This human-centric approach reduces exposure to social engineering and insider threats.

Furthermore, Charoen Pokphand Group actively collaborates with regulatory authorities, cybersecurity alliances, and threat intelligence communities, both domestically and internationally. By engaging in industry-wide knowledge exchange and supporting the development of sectoral security standards, the Group not only strengthens its own cyber posture but also contributes to the resilience of the broader business ecosystem.