Business Continuity Plan

The cornerstone of our resilience strategy, our Business Continuity Plan (BCP) is designed to ensure uninterrupted operations in the face of natural disasters, cyber threats, and other disruptions affecting our Port and Special Economic Zone (SEZ) operations. The plan specifically addresses scenarios where critical aspects such as personnel availability, facilities, and technology are compromised, impacting the delivery of essential IT services vital for our business functions and customer service commitments.

The BCP Framework

• Delineates a clear crisis management organisation structure, detailing the roles, responsibilities and procedures for recovery and resumption.
• Activates when APSEZ management triggers the recovery protocols in response to a disaster or emergency, ensuring continuity, resilience, and a swift return to normal operations.

Core Elements of the BCP

Activation

The BCP is activated on the direction of the APSEZ management in the event of a BCP-defined crisis. This comprehensive system:

• Is designed to facilitate understanding of departmental responsibilities during resumption, recovery, restoration, and return phases
• Outlines the essential resources and records needed by critical departments for effective business resumption

To ensure the plan's effectiveness and readiness, we conduct semi-annual tests of all procedures and protocols.

Oversight and Cybersecurity Measures

The Chief Information Security Officer (CISO) plays a pivotal role in overseeing the Business Continuity and Disaster Management Plan. The CISO:

• Focusses on meeting the various technological and cybersecurity requirements
• Is entrusted with responsibilities that extend to assessment of system upgrades, consultation with technology partners, and engagement with other stakeholders to strengthen the cybersecurity framework

Cybersecurity Awareness and Capability Enhancement

Recognising the importance of cybersecurity in our overall business continuity strategy, APSEZ mandates annual cybersecurity training for all employees.

• The company emphasises rigorous adherence to all its protocols
• In FY 2024-25, we successfully trained 3,212 employees, enhancing our cybersecurity awareness and preparedness

Operational Improvements and Systems Implementation

The IT team at APSEZ has deployed a series of systems to further enhance the company’s operational efficiencies.

• Grievance Management System (GMS)
• Integrated Transport Utility Platform (ITUP)
• Ransomware Protected Backup solution (Commvault AirGap)
• Gate Operating System (GOS)

Each implementation is targeted at streamlining operations, enhancing security, and improving service delivery across the organisation.

Through comprehensive BCP, rigorous cybersecurity initiatives, and continuous operational improvements, APSEZ maintains resilience, upholding the safety and security of its operations, and providing uninterrupted service to its customers, even in the face of unforeseen challenges.