Cybersecurity Policy

         To ensure that QTC Energy Public Company Limited manages cybersecurity risks and security effectively, in accordance with laws and international standards, and can prevent cyber threats and data breaches efficiently within the company and its subsidiaries, the following cybersecurity policy has been established:

1. 1. Establish a cybersecurity working group, with executives from all departments and subsidiaries responsible for cybersecurity, led by the Information Technology department.
   2. Review cybersecurity practices to align with international standards and monitor compliance with relevant laws and regulations at least once a year or whenever changes occur.
   3. Manage cybersecurity risks by assessing threats and impacts quarterly through the Sustainability and Enterprise Risk Management Committee.
   4. Provide cybersecurity awareness training to employees to build awareness, responsibility, and understanding of how to handle cyber threats correctly, with knowledge tests at least once a year.
   5. Install cybersecurity protection and intrusion detection systems covering the company’s and subsidiaries’ information systems, with 24-hour monitoring and quarterly threat reports to executives.
   6. Develop an emergency response plan for cybersecurity incidents to manage incidents quickly and effectively, including a recovery plan to minimize impacts on critical business processes, with drills and reviews at least once a year.
   7. Conduct vulnerability assessments or penetration tests covering information infrastructure and applications at least once a year.
   8. All employees at all levels in the company and its subsidiaries must strictly adhere to measures and practices to reduce risks and prevent cyber threats. Neglect or actions that pose cybersecurity risks are considered disciplinary offenses and are subject to disciplinary action as specified in the company’s work regulations.

         This announcement cancels the previous cybersecurity policy No. QTC64074 dated September 29, 2021.

Announced on September 19, 2024
Ruangchai Kritsnakriengkrai
Managing Director

© 2021 QTC ENERGY All rights reserved.