Construction Industry Council - Annual Report 2024

CONSTRUCTION INDUSTRY COUNCIL 166 OUR SUSTAINABILITY JOURNEY Cybersecurity Training and Awareness Throughout 2024, we prioritised staff training and awareness to reinforce our defences against cybersecurity risks. Training initiatives included: • Mandatory e-learning modules and voluntary webinars for all employees • A Townhall Meeting, hosted by cybersecurity expert of the CIC • The launch of a Gamified Phishing Email Campaign in March 2024, designed to enhance staff awareness of phishing risks and empower them to act as “human firewalls”. Gifts are given to motivate staff who report phishing risks promptly. 100% Employees completed the mandatory cybersecurity training in 2024 We provide ongoing education through: • A Cybersecurity Monthly Newsletter featuring updates on current risks and mitigation strategies • Regular email tips on identifying phishing emails as part of the Phishing Email Review Program By adopting a proactive approach to cybersecurity and data privacy, we ensure resilience, reliability, and robustness of our data systems. Due to the consistent efforts and collaboration across all levels of the CIC, we are proud to have achieved an A grade from SecurityScorecard in 2024, which reflects our dedication to maintaining exemplary cybersecurity practices and protecting the interests of our stakeholders. A GRADE from SecurityScorecard