As already mentioned in this section, the information security management system was updated through the adoption of ISO 27001:2022 “Information Security, Cyber Security, and Privacy Protection”, which introduces specific requirements on cybersecurity and GDPR. This update involved a full review of internal documentation, strengthening our security and data protection practices, as well as a number of dedicated training activities supported by phishing simulations and refresher courses on security tools and procedures. In addition to the many security measures adopted, we are committed to protecting our customers and the Company even in the event of unexpected attacks, ensuring business continuity and security for all our stakeholders. To this end, we have taken out a specific insurance policy that covers a wide range of scenarios and enables us to respond with greater confidence even to the most unpredictable situations. Sustainability Report 2024 Page 55
RkJQdWJsaXNoZXIy NDUyNTU=