Investor Presentaiton
nuuday
In brief
Business and strategy
Performance
Corporate governance
Financial statements
Risk & trend
Risk domain
Cyber attacks
Security & Fraud
Stable >
Ransomware on core systems
Security & Fraud /
Operations
Increasing
Network infrastructure
downtime
Operations
Stable
Regulatory privacy
Stable >
Details & impact
Mitigation initiatives
The Centre for Cyber Security's latest report on threats
against the Danish telecommunication sector indicates
that the threat of cyber crime is "Very High."
Depending on the nature of the cyber attack, the
processing, confidentiality, integrity, availability, stability,
capacity, performance, continuity and/or the resilience of
the information technologies Nuuday uses can be
impacted.
• Investing in security and operations of network
infrastructure
• Focused efforts on network resilience through risk and
incident management
• Continued dialogue with Danish authorities and
customers to ensure data protection and confidentiality
With increased threats of cyber crime, the risk of
ransomware also increases. Depending on the attack
vector and affected systems, ransomware could have a
high impact on Nuuday's ability to continue its business.
• Establishing new ways to improve resilience
•
Crisis management exercises
Nuuday's business relies on functioning telecommunication
infrastructure (mobile network, coaxial, fibre, etc.). When
network providers face downtime, Nuuday's customers
may be unable to make telephone calls, use the internet,
or consume entertainment. Events that do not fulfil
customer expectations for security and quality can
negatively impact retention.
• Working with infrastructure providers to ensure speedy
recovery
•
Review and testing of business continuity plans
Legal & Compliance
European and national laws stipulate how Nuuday can
process personal information. The current legislative
landscape regarding transferring personal data to non-EU
countries has been in focus.
A general compliance risk relates to customer data being
processed in breach of relevant privacy laws and
regulations, potentially resulting in large fines or negative
references in public arenas.
Data protection network with Data Privacy Managers
anchored in each of Nuuday's organisational areas
Integration of Data Processing Agreements & Transfer
Impact Assessments into the procurement process
• Dedicated resources to support with data subject
requests
Privacy by Design principles integrated into software
development & project lifecycles
Nuuday Annual Report 2022
26
2View entire presentation