IT risk – cyber threats

The following may have a direct impact on the production processes, competitive position and reputation of the Śnieżka Group:

failures of key IT systems;
effects of ransomware attacks;
unauthorized access by cybercriminals through other activities to key management support systems, process control systems, as well as to unpublished, confidential data;
other events in the area of IT security.

In order to minimize this risk, the Group:

develops and updates the systems used to ensure information security,
regularly backs up key data;
has very modern, extensive anti-virus protection, cooperating with the monitoring centre, including: against phishing emails.

The Group companies in Poland are constantly monitored by the IT security operations centre (so-called SOC, Security Operation Centre), which responds to security incidents.

In accordance with it, the following initiatives were implemented in the reporting period:

detailed audit of the security level in individual companies of the Group; as a result, vulnerabilities of the IT solutions used were identified and removed;
developing and planning the implementation of IT security management procedures in cooperation with Śnieżka’s suppliers and vulnerability management;
developing an action plan and starting work in the field of business continuity management, analysis and prioritization of IT risks, definition of critical IT systems to ensure business continuity.

Financial risk