ANNUAL REPORT 2021 77 SUSTAINABILITY Data transmitted through our networks is encrypted using the latest encryption technologies to ensure confidentiality. Regulations, standard operating procedures and enforceable regulations for use of corporate systems, confidential data, email, mobile devices and passwords. The use of external hardware appliances such as thumb drives and other media are also restricted within MYEG premises. Websites and social media portals with high risks in cyber security are restricted to prevent malicious attacks via the exploitation of vulnerabilities. Constant training is provided to employees to ensure that employees are aware of the security standards that we need to adhere to. Deployment of firewalls, antivirus and antimalware systems, access management systems and vulnerability systems throughout the entire IT infrastructure. Adherence to Payment Card Industry Data Security Standard in the handling of credit card information for our e-services transactions. Compliance with PDPA in dealing with personal information collected in the course of commercial transactions. Regular audit and penetration test to ensure the robustness of the entire IT infrastructure. Building on from the previous year, MYEG has continuously sought ways to improve security by updating our IT policy and procedures to be in compliance with the ISO / IEC 27001 Information Security Management System and NIST Cybersecurity Framework. The Group is also in full compliance with the Malaysia’s Personal Data Protection Act (“PDPA”). We are currently not a member of the Global Network Initiative. By having these safeguards in place, it reduces the chance of MYEG being exposed to a future cyberattack whilst also preparing us in case one does occur through a united front. No data breaches or framework non-compliances occurred during the year under review. BUSINESS MODEL GOVERNMENT CONCESSIONAIRE The ongoing changes that occur in politics, whether it be involving a change of parties in power or government policies themselves, does impact MYEG’s financial and non-financial value creation capabilities. Despite this, the Group does not solely rely on its capabilities of being an e-government service provider and has other services which include healthcare and commercial sectors. Political changes and decisions are not something that MYEG can determine but focusing on our healthcare and commercial sectors are aspects that are under our control. Especially during the COVID-19 pandemic, the Group has launched a variety of healthcare related services on behalf of its government partners as an attempt to provide aid during this troubling period. FY2021 has foreseen developments for both healthcare and commercial services and more can be found in our Management Discussion and Analysis section of this report. MATERIALITY MATTERS (CONT’D) MYEG’s IT Security Protocols and Practices:
RkJQdWJsaXNoZXIy NDgzMzc=