Sustainability Statement Risk Management (Cont’d) The REIT recognises the importance of safeguarding our tenants’ information from unauthorised access, breaches and cyber threats. To this end, initiatives to protect customer data, employee privacy and operation details are in place to strengthen data privacy, cybersecurity and operational resilience, while maintaining stakeholder trust. Regulatory Compliance and Risk Management (Cont’d) Data Privacy and Cybersecurity • Manages day-to-day risks inherent in business activities, guided by established risk strategies, frameworks and policies • Controls risks by utilising business control and compliance frameworks, implementing internal control processes and adequate measures Risk Owners In 2024, our supplier risk assessment revealed no high risks in critical areas such as environmental, social, labor, health and safety, tax and data protection. We emphasise the importance of risk management to our stakeholders, ensuring that risk owners take prompt action to address any issues. During Committee meetings, Management is updated on our progress and reviews mitigation strategies. The REIT adheres to various national laws, regulations and guidelines, including but not limited to the following: We are pleased to report zero complaints regarding breaches of customer privacy or data loss in FY2024. Main Market Listing Requirements Guidelines on Listed REITs Guidelines on Islamic Capital Market Products and Services EPF Act 1991 Malaysian Code on Corporate Governance (“MCCG”) Guidelines on Corporate Governance for Capital Market Intermediaries Applied a User Access Rights Matrix to ensure that only authorised personnel can access to sensitive information Adhered to the Personal Data Protection (“PDP”) Policy to comply with regulations and to serve as a guide for safeguarding data Established Cyber Security procedures which outline essential measures to be taken in the event of data breach Established Data Recovery Procedure which outlines the key steps for performing data recovery activities during an unplanned incident affecting our working data Initiatives to safeguard data 60 AL-SALĀM REIT ANNUAL REPORT 2024
RkJQdWJsaXNoZXIy NDgzMzc=