Investor Presentaiton
Treating data with respect
Experian's business is dependent on the secure holding and management of sensitive consumer information
Governance
•
Information security continues to be of the highest priority at Experian. Regular updates provided to the Board's Audit Committee and risk committees on information security risks and the
business's response. The Group's Security & Continuity Steering Committee oversees the management of global information security, physical security and business continuity
Clear, stringent and regularly-updated data-management policies and data-security strategies
We only share data with organisations we trust, follow strict guidelines and comply with all relevant laws
Contractual security requirements imposed on our partners and 3rd parties who use our data, plus periodic reviews of third-party controls
•
•
Continued investment in data security technology
Deployment of physical and technological security measures, combined with monitoring and
alerting for suspicious activities
Information security programme for identifying, protecting against, detecting, and responding
to cyber security risks and incident recovery
We have built a very capable information security team deeply embedded in our businesses
around the world and staffed with top industry talent
Constant investment and innovation. We apply significant capital and resource efforts every
year to ensure the security of our data and soundness of our applications, whilst deploying
the latest tools in our environment to detect and prevent intrusions or loss of data.
Robust security controls based on ISO 27001 (internationally recognised security standard)
Regulation
•
'Security First' Culture
Our culture of security means all Experian employees are responsible for data security
Mandatory annual training for all employees on information security and data protection
Training metrics tracked weekly to monitor compliance. Shared monthly with Security and
Continuity Steering Committee.
Those who work more closely with data receive more in depth training and are required to
attend two courses annually. Depending on the role and an employee's training cycle, users
could take 2-4 or more mandatory courses in a year.
We provide Secure Software Development training for those involved in product and
software development.
The industry is subject to regulation in each of our operational jurisdictions - primarily, the Consumer Financial Protection Bureau ("CFPB") in the US, the UK Financial Conduct Authority ("FCA”)
and various federal and state legislative requirements in Brazil
•
Increasing regulation globally as regulators adapt to the 'data explosion'
24
This creates opportunities as well as challenges, e.g. moves to open up banking and other data-rich industries encourage customers to get the best deals in the market
Experian Public
For further information on data security, privacy and accuracy please see pages 43-46 of the FY21 Annual Report, available at www.experianplc.com.View entire presentation