2.3. Data privacy and the importance of cybersecurity Data protection and cybersecurity are a core pillar of PRT’s governance, particularly given the nature of the services provided and the increasingly critical role of data in communications between companies, citizens and Public Administration. In 2024, the Group made significant investments to further strengthen its cybersecurity infrastructure, raising protection measures to an even more advanced level. The information security management system is based on ISO/IEC 27001:2022 certification, recently updated through an extensive process of documentation review, technical testing and internal training. Alongside regulatory compliance, PRT has consolidated a robust, multi-layered technological framework. Key elements of the Group’s cybersecurity model in 2024 include: This integrated system enables PRT to ensure high levels of protection for sensitive data entrusted by private clients and public bodies, strengthens service continuity and reinforces stakeholder trust in a context of growing cyber risks. For PRT, cybersecurity is not merely a technical requirement, but a strategic asset that defines our role as a reliable partner in the management of critical data and document processes. Material Topics Management approach SDGs we contribute to Development, inclusive growth and talent attraction • SA8000 Code of Conduct • SA8000:2014 • ISO 45001:2018 • Code of Ethics • Code of Conduct Shared value creation and local development • SA8000 Code of Conduct • SA8000:2014 Executive Summary 2024 Page 31 Mandatory training for all employees cwith a focus on secure use of technologies, phishing awareness and individual responsibility. Updated GDPR policies managed by a dedicated Privacy Office overseeing data protection, DPIAs and regulatory compliance; Encrypted and distributed backups supported by disaster recovery strategies designed to ensure business continuity even in emergency scenarios; Periodic vulnerability assessments and penetration testing carried out by specialised partners to proactively identify weaknesses and potential risks; Continuous 24/7 monitoring through an external Security Operations Centre and enhanced log analysis tools; A multi-layer security architecture combining intelligent firewalls, intrusion detection systems and advanced protection against malware and ransomware;
RkJQdWJsaXNoZXIy NDUyNTU=