Digital Management – Thaioil Group

Digital Strategy for Sustainable Growth

Digital Transformation

Challenges, Risks,

and Impacts

Thaioil Group applies digital technology and Artificial Intelligence (AI) to enhance its business competitive edge and support the 2S1P strategic plan, prioritizing a user and customer-centric focus alongside cost efficiency. The Company develops systems and applications to optimize operational efficiency across all dimensions, including production, engineering, market analysis, and the supply chain. Furthermore, AI is applied in the research and development of new businesses, in strategic decision-making, and in enhancing commercial capabilities through in-depth analysis of customer data (Customer Insight & Experience).

Nonetheless, the significant challenge of sustainable digital management lies in laying a foundation of reliable data and developing the digital competencies of its personnel. Key risks and impacts arising from the use of technology include cybersecurity incidents that may affect business continuity, leakage of personal data and critical business information, as well as impacts on the Company’s reputation and stakeholder confidence. Accordingly, the Company has established data governance standards and systematically manages information security risks. Moreover, the Company has defined a policy for the use of Generative AI to ensure that AI usage is safe, transparent, and in compliance with laws and regulations, while continuously promoting a data culture among employees to drive the Company’s digital strategy towards achieving its goals and ensuring sustainable growth.

Commitment and Target

Thaioil Group is committed to enhancing digital operations throughout the value chain to strengthen business competitiveness by driving digital transformation, developing a data-driven organization, and elevating the efficiency of Information Technology (IT) services to be modern and responsive to business operations and long-term growth.

In the cybersecurity dimension, the Company is committed to conducting its cybersecurity operations in accordance with internationally recognized governance frameworks, such as the NIST Cybersecurity Framework, and integrating them into its digital operations to prevent threats, protect the organization’s critical data and systems, and maintain stakeholder confidence alongside sustainable digital development.

Targets

Digital Maturity Index - Establish a digital foundation to enhance competitiveness and empower employees with vital skills and capabilities to effectively utilize technology.

Targets 2025

Performer⁽¹⁾

(Level 3 out of 4 levels)

Long-term Targets 2030

Strong Performer ⁽²⁾

(Level 3 out of 4 levels)

Cyber-attacks that affect business operations (Damage to Business)

Targets 2025

Case

0 Long-term Targets 2030

Case

0 Internal Customer Satisfaction

Targets 2025

Percentage

≥80

Long-term Targets 2030

Percentage

≥80

Employee pass rate for Phishing Email Exercise

Targets 2025

Percentage

Greater than or equal to

87 Long-term Targets 2030

Percentage

Greater than or equal to

87 Cybersecurity Maturity

Targets 2025

Cyber Maturity Score (Max 5 points)

3.2 points for Information Technology

2.9 points for Operational Technology

Long-term Targets 2030

Cyber Maturity Score (Max 5 points)

3.6 points for Information Technology

3.2 points for Operational Technology

Remarks
(1) “Performer” level indicates that the Company’ functions leverage on digital capabilities effectively.
(2) “Performer” level corresponds to an assessment score range of 50 – 74 points out of 100 points. The expectation is to elevate digital capabilities to the upper half of the Performer level specifically targeting a score of at least 62 points or higher (Strong Performer).

and Performance

Thaioil Group has established the Digital Steering Committee (DGSC) and the Cyber Emergency Response Team (CERT) to drive digital operations and enhance cybersecurity efficiently. The Company has appointed personnel with expertise to oversee cyber management throughout the management level and the operational level. Performance is regularly reported to the management executives while reporting the information security and cybersecurity risk management to the Risk Management Committee (Board level).

Policies, Governance Structure, and

Management of Digital, Cyber, and AI Strategies

Digital Policy

Thaioil Group has announced the following digital policies:

The TOP Group Digital Policy is established to ensure that the governance, direction-setting, use of digital technology, and communication within Thaioil Group are aligned with international practices, applicable laws, and other related policies, and can be implemented effectively, with clarity, and at a consistent standard.
Cyber Security Policy is established to ensure that information systems within Thaioil Group are protected against threats and that cyber risks are managed effectively, in accordance with internationally recognized frameworks and practices.
Social Networking Policy is established to ensure that the governance, direction-setting, dissemination of information, access to social media and electronic services, as well as the expression of opinions, are conducted correctly and appropriately.
Personal Data Protection Policy (Personal Data Protection Act: PDPA) is established to ensure clear and appropriate criteria, mechanisms, oversight measures, and management of personal data, respecting privacy rights and prioritizing the protection of personal data involved in transactions with the Company.
TOP Group Artificial Intelligence Policy is established to ensure that the governance of AI usage and development is effective and unified under an appropriate AI Governance framework that is transparent and compliant with laws, ethical principles, and the standards established by the Company, as well as aligned with international practices, so that AI is used and developed responsibly, safely, and with consideration of impacts on the organization and stakeholders.

The Digital Technology & Communication Policy

Cyber Security Policy

Management Approach

Digital Committee Structure and Cyber Governance

To drive effective digital operations and cybersecurity, Thaioil Group has announced its digital policies and established the Thaioil Group Digital Steering Committee (DGSC) to set the direction and strategic framework, monitor the progress of the Group’s digital operations, and regularly report performance to top management.

In parallel, Thaioil Group has established the Cyber Emergency Response Team (CERT) and appointed responsible personnel with specific expertise, from the management level to the operational level, to manage cyber incidents systematically, while continuously reporting information security and cybersecurity risk management to the Risk Management Committee.

Committees and Working Groups

Thaioil Group Digital Steering Committee (DGSC)

The Thaioil Group Digital Steering Committee was established in 2015 to promote maximum efficiency and effectiveness in digital management.

The Committee Structure
1. Chief Executive Officer and President	(CEO) Chairman
2. Senior Executive Vice President – Hydrocarbon	(SEVP) Vice Chairman
3. Executive Vice President – Corporate Commercial	(EVPC) Member
4. Executive Vice President – Operation Excellence	(EVPE) Member
5. Executive Vice President – Finance and Accounting	(EVPF) Member
6. Executive Vice President – Corporate Governance and Sustainability	(EVPG) Member
7. Executive Vice President – Manufacturing	(EVPM) Member
8. Executive Vice President – Power, New Business and Digitalization	(EVPN) Member
9. Executive Vice President – Organization Effectiveness	(EVPO) Member
10. Executive Vice President – Strategy	(EVPS) Member

The Digital Department Manager (DGVP) serves as the Secretary of the Thaioil Group Digital Steering Committee.

The governance scope of the Thaioil Group Digital Steering Committee, covering the development or adoption of foundational digital tools, comprises:

(i) Digital Function

(ii) Telecommunication Function

(iii) Production and Refining Process Control Function

(iv) Instrument Engineering Function

The roles and responsibilities of the Committee are as follows:

Set the direction, policies, and digital strategic plans of Thaioil Group.
Govern and manage digital collaboration to align with the established policy direction and digital strategic plans, and make decisions on collaboration issues critical to the strategy.
Drive policies, standards, and management mechanisms to leverage digital technology to enhance work efficiency and build business competitiveness.
Oversee digital and cybersecurity risk management to build stakeholder confidence and ensure compliance with relevant laws and regulations.
Approve the master plan approach and consider the digital budget.
Provide consultation and recommendations to functions under its governance.
Consider, screen, and monitor the progress and performance of digital operations, and report the results to the Board of Directors as appropriate.

The Thaioil Group Digital Steering Committee convenes to consider matters relating to its roles and responsibilities at least once a quarter, or as necessary, and reports to the Board of Directors at least once a year, or as necessary.

Thaioil Group Digital Steering Committee holds a meeting to consider matters related to their roles and responsibilities every quarter or as necessary. Also, the Committee reports the progress to the Board of Directors at least once a year or as appropriate.

Cyber Emergency Response Team (CERT)

Cyber Emergency Response Team (CERT) was established in March 2022 to oversee and respond to digital emergencies. The purpose is to promptly recover from emergencies and return to normal system operations while maintaining Thaioil Group’s business continuity and minimizing any negative impacts or losses.

CERT Structure

1. Executive Vice President – Power, New Business and Digitalization as CERT Commander
2. Manager – Legal as Lawyer Team
3. Vice President – Corporate Strategic Risk as Risk, BCM and Insurance Team
4. Manager – Business Continuity Management as Risk, BCM and Insurance Team
5. Manager – Corporate Insurance Management as Risk, BCM and Insurance Team
6. Manager – Security as Physical Security Team
7. Manager – Employee Relation as Information Center Team
8. Manager – Public Affairs Coordination-Brand Management as Information Center Team
9. Manager – Refinery Relation Coordinator – Refinery Public Relation as Information Center Team
10. Manager – Investor Relations as Information Center Team
11. Manager – Domestic Commercial Operations – Petroleum & Petrochemicals as Information Center Team
12. Vice President – Digitalization as Response Management Team
13. Vice President – Engineering as Response Management Team
14. Vice President – Technology as Response Management Team
15. PTT Digital Computer Security Incident Response Team (CSIRT) (Response Team)

Roles and Responsibilities of the CERT Team

The Executive Vice President of Power, New Business, and Digitalization (EVPN) is positioned as the Chief Information Security Officer (CISO) or CERT Commander to oversee the Company’s cybersecurity in accordance with ISO27001 Information security management systems. The roles and responsibilities of CERT are:
1. Formulate management strategies to respond to emergency situations.
2. Develop the emergency management plan and assign the key responsibility for each activity to ensure that all those involved in the plan understand their roles and responsibilities.
3. Monitor and assess the situation to provide recommendations in responding to an emergency situation and returning to normal operations.
4. Report and communicate the emergency situations to relevant parties, including the executives and refineries, while providing information on the incident, action plans, current status, and the impact on the Company’s production or business operations.

Cyber Emergency Response Team (CERT)

Cyber Emergency Response Team (CERT) The Thaioil Group Cyber Emergency Response Team was established in March 2021 to govern and operate during digital emergencies, restoring emergency situations to normal as quickly as possible while taking into account business continuity and minimizing impacts or losses across all aspects of Thaioil Group.

The Team structure comprises:

Executive Vice President – Power, Innovation and Digital Business (CERT Commander)
Legal Section Manager (Lawyer Team)
Corporate Strategy Risk Management Department Manager (Risk, BCM and Insurance Team)
Business Continuity Management Section Manager (Risk, BCM and Insurance Team)
Corporate Insurance Management Section Manager (Risk, BCM and Insurance Team)
Security Section Manager (Physical Security Team)
Labor Relations Section Manager (Information Center Team)
Corporate Communications Section Manager (Information Center Team)
Refinery Public Relations Section Manager (Information Center Team)
Investor Relations Section Manager (Information Center Team)
Domestic Commercial Section Manager (Information Center Team)
Digital Department Manager (Response Management Team)
Engineering Department Manager (Response Management Team)
Technology Department Manager (Response Management Team)
PTT Digital Computer Security Incident Response Team (CSIRT) (Response Team)

Roles and responsibilities of the Team

The Executive Vice President – Power, Innovation and Digital Business (EVPN) serves as the Chief Information Security Officer (CISO) for the information security management system, overseeing the Company’s cybersecurity. The Team’s roles and responsibilities are as follows:

Formulate strategies for managing cybersecurity emergencies.
Develop crisis management plans by assigning responsible persons for each activity with clearly defined roles and responsibilities, and ensure that all relevant parties know and understand their assigned roles.
Monitor and assess situations, and provide recommendations for controlling and recovering from incidents.
Report emergency situations to relevant parties, including executives and the refinery, covering the incident, action plans, current status, and impacts on the Company’s production or business operations.

Digital Master Plan 2022 - 2030

The Digital Master Plan has been developed to support business operations with short-, medium-, and long-term frameworks in different aspects, including:

Strengthen Business Competitiveness (Agile Domain Digital Platform)

Integrate digital technology throughout the Company’s value chain to support the business strategy, and link to the core work processes through the Value Chain Digital Platform (VCDP) project.

Evolving into a Data and AI Driven Decision-Making Organization
(Big Data & Artificial Intelligence (AI))

Ensure reliable and efficient data utilization and promote the use of artificial intelligence technology by selecting interesting use cases within the Company and conducting Proof of Concept (POC) projects before scaling up.

Cybersecurity Readiness
(Cyber Resilience)

Develop a cybersecurity system based on the Zero Trust principle and establish measures and practice drills to prepare for potential cyber threats regularly.

Establishing an Efficient IT Infrastructure and Fostering a Productive Work Environment Within the Organization (Digital Workplace)

Upgrade infrastructure systems, such as improving the Wi-Fi system for better performance, enhancing the capabilities of laptops, and upgrading the meeting room systems for increased convenience, to facilitate seamless and flexible hybrid work from anywhere.

Employee Digital Skills Development (People)

Establish a framework for enhancing digital literacy and skills through various initiatives, including conducting digital skills training for employees and inviting external experts to provide insights on emerging technologies.

Strengthen Business Competitiveness
(Agile Domain Digital Platform)

Enhance business processes with digital technology in the form of Business Digital Platform to integrate the working process.

Evolving into a Data and AI Driven Decision-Making Organization
(Big Data & Artificial Intelligence (AI))

Promote and facilitate the adoption of developed AI / Generative AI for wider use (Adoption at Scale).

Cybersecurity Readiness
(Cyber Resilience)

Examine and adopt new innovative technologies to improve cybersecurity, both in defense and incident response (Automated Defend & Response).

Establishing an Efficient IT Infrastructure and Fostering a Productive Work Environment Within the Organization (Digital Workplace)

Develop an IT service system as a centralized “One-Stop Service Platform” and providing services with standardized ITSM (IT Service Management).

Employee Digital Skills Development (People)

Establish digital proficiency as the foundation and basic qualification for employees at all levels, fostering engagement, ownership, and clearly defined roles of business-line employees in digital projects and system management (IT Business Role Enablement).

Strengthen Business Competitiveness
(Agile Domain Digital Platform)

Achieve business excellence (Intelligence Business) by adopting digital technology as an automated tool to support every working process.

Evolving into a Data and AI Driven Decision-Making Organization
(Big Data & Artificial Intelligence (AI))

Seek new business opportunities of the Big Data from organization-managed information.

Cybersecurity Readiness
(Cyber Resilience)

Consistently develop cybersecurity system to become the leader on cybersecurity in the oil and gas industry.

Establishing an Efficient IT Infrastructure and Fostering a Productive Work Environment Within the Organization (Digital Workplace)

Boost productivity and enhance employee well-being by providing and advancing IT and digital infrastructure.

Employee Digital Skills Development (People)

Educate employees to continuously pursue digital skills and strive towards “Digital Natives”.

Management of Key Digital, Cyber, and AI Issues

In 2025, Thaioil Group successfully implemented core focus areas as the part of the Company’s digital strategy as follows:

Digital for Enhancing Business Competitiveness

The Company prioritizes the integration of digital technology to elevate and enhance business competitiveness through the continuous development of strategic plans and execution of digital projects, while monitoring performance and reviewing the plans annually. This aims to ensure that the application of digital technology in each area remains aligned with the business targets amid a rapidly changing environment. The following are key projects:

Projects	Details
COMNXT Project	Develop a commercial platform that enhances the Company’s competitive ability by managing customer and partner data, marketing information, and tracking purchase/sale status. This will also enable the Company to identify new potential customers, increase sales opportunities, make informed decisions, and operate efficiently. Additionally, it will create value for the Company while enabling risk management through tools that control data access and track data usage, ensuring the organization’s operations are secure and compliant with regulations.
Outward Remittance Process Enhancements with Banking Business Net Project	Support the Company’s international remittance processes, such as crude oil purchasing payments, which involve foreign exchange (FX) rate. The developed system features Host-to-Host connectivity with multiple banks providing increased transaction options to ensure more competitive exchange rate and enhance the Company’s potential for value creation.
Supplier Portal Project (A Centralized Procurement Data Hub for Thaioil Group’s Suppliers)	Allow suppliers to track procurement status, verify documents, and access reports by themselves. The system also supports multi-dimensional supplier background checks, including Media Pre-screening, Sanction Checking, and Compliance Checking, which mitigate risks, reduce instances of non-compliance, and effectively supports the Company’s decision-making process regarding supplier selection.
TOPLABCS Project	Enhance automation within laboratory operations, covering End-to-End processes ranging from Equipment Performance monitoring and Inventory Management to Staff Competency assessment and development. This project facilitates systematic integration of laboratory operations and enables effective centralized process management in alignment with the laboratory quality management system.

Cybersecurity Management

Thaioil Group has adopted the National Institute of Standards and Technology (NIST) Cybersecurity Framework from the United States, and Zero Trust Architecture protection guidelines into its management approaches. The approaches include login examinations and granting users the minimum necessary permissions to ensure that Thaioil Group has appropriate cyber risk controls for its size and diversity. Key activities include:

Engage external consultants to assess security gaps in accordance with the NIST 0 framework and develop an improvement plan to ensure the Company’s readiness in governance, detection and prevention systems, as well as sustainable processes for addressing cyber threats.
Implement anomaly detection systems within the main DCS of the Operation Technology (OT) production system to ensure rapid and continuous monitoring of potential threats to production systems.
Develop a Cloud Security improvement plan and implement systems to detect misconfigurations or vulnerabilities within the Cloud system. This facilitates the adjustment of configurations and the remediation of vulnerabilities in Cloud-based applications to ensure security.
Upgrading digital systems and applications affected by obsolescent technology (Application Obsolescence) ensures they are modern and current. This helps prevent cyber risks and threats arising from vulnerabilities in obsolete systems and applications, providing users with confidence in safe and secure usage.
Implement Multifactor Authentication (MFA) for all internet-facing applications accessed from outside the Company.
Implement Data Classification and Data Handling Adoption, specifically targeting high-risk user groups, such as executives.
Enforce Data Encryption on database systems containing sensitive personal data.

Cyber Emergency Response

Thaioil Group places importance on continuously monitoring, preventing, and responding to cyber threats to strengthen the security of its information technology systems, critical data, and business operations. The Company monitors anomalous events and threats through an external service provider (Manage Defense and Response: MDR) together with the Security Operation Center (SOC) 24 hours a day, while regularly elevating its measures for threat detection, risk assessment, readiness testing, and incident response drills to respond effectively to rapidly evolving threats. Key activities include:

Arrange for a service to search for risks of accessing applications or various IT services on the internet (Attack Surface Management) to increase the ability to detect threats or anomalies rapidly.
Arrange for services to monitor, alert, investigate, and remediate cyber threats by experts in anomaly detection (MDR) to build confidence in handling such threats, in addition to the main service provider which is the Cyber Operation Centre (SOC).
Conduct vulnerability assessments every 3 months and ensure that the remediation of defects is completed.
Conduct Penetration Testing and Red Teaming to find vulnerabilities by external experts on an annual basis.
Conduct Ransomware Assessment to ensure preparedness for handling cyber incidents regarding data ransom by reviewing processes and operation manuals (Cyber Emergency Response Procedure and Playbook) to update them to be current and conduct practice drills at least 2 times per year. This covers both Information Technology and Operation Technology and integrates into the Business Continuity Plan. It includes communication to external units and stakeholders when such incidents occur, as well as reporting operational results to executives regularly, including reporting on risk management regarding information security and cybersecurity to the Risk Management Committee.

Digital Knowledge and Cybersecurity Awareness Promotion for Employees (Digital Cultivation)

Thaioil Group places importance on continuously strengthening employees’ knowledge, awareness, and safe digital usage behaviors, enabling them to use technology and data appropriately and in compliance with laws, while reducing cyber risks at the organizational level. Key activities include:

Disseminate knowledge through various media channels to foster employee interest and raise awareness regarding cybersecurity.
Conduct awareness training tailored to specific user groups, including executives, general employees and system administrators.
Raise awareness of phishing email threats by conducting unannounced phishing email tests for employees approximately every three months and subsequently reporting the test results to the respective executives. Employees who do not pass the tests are required to attend additional training on the prevention of phishing email threats.
Communicate and educate on digital laws, such as the Computer Crime Act and the Copyright Act.
Develop online training courses to enhance understanding and provide basic guidelines regarding the Personal Data Protection Act (PDPA) requiring all employees to attend and complete the testing. Additionally, communicating the Personal Data Retention Guideline (covering collection, deletion, or destruction of personal data) through the Compliance Newsletter.

Artificial Intelligence Policy and Governance

Thaioil Group is committed to governing the use of artificial intelligence responsibly. The Company has established the TOP Group Artificial Intelligence (AI) Policy, referencing the international standard ISO 42001 – Artificial Intelligence Management System (AIMS), to ensure that AI is used and developed responsibly and safely, in alignment with international practices, and with consideration of impacts on the organization and stakeholders.

Data and Artificial Intelligence Management

Thaioil Group prioritizes data management and the application of Artificial Intelligence (AI) to enhance business competitiveness, support data-driven decision-making, and elevate operational efficiency throughout the value chain, alongside governing AI usage responsibly, transparently, and in compliance with relevant laws, ethical principles, and international standards. Key practices include:

Classify and assess the risk level of AI systems before deployment. Sensitive or high-risk AI capabilities, such as Facial Recognition, Biometric Identification, or Biometric Surveillance technologies, are restricted to access and use by approved persons only. High-risk AI systems must undergo in-depth risk assessments, the establishment of risk control measures (Guardrails), and human oversight.
Require continuous testing, monitoring, and evaluation of AI model performance in accordance with the Plan-Do-Check-Act (PDCA) cycle to monitor changes in AI system outputs and accuracy, and regularly improve the models to reduce errors and mitigate risks from bias of AI models over time.
Require AI users and developers to conduct a regular review and verify AI model outputs to avoid bias, particularly where AI model outputs may affect individuals, and conduct Systematic Bias Testing to prevent and reduce risks of unfair discrimination.

Promotion of Artificial Intelligence Knowledge and Awareness

Thaioil Group places importance on promoting knowledge and appropriate practices regarding artificial intelligence, enabling employees to use and develop AI responsibly, transparently, safely, and in accordance with the Company’s policies. Key initiatives include:

Provide employee training on the ethical use and security of AI usage, in line with TOP Group Artificial Intelligence Policy, through the Thaioil Academy internal online learning platform, to ensure employees understand and use AI responsibly in accordance with the Company’s standards.
Communicate to employees the importance of ensuring that AI-generated content is appropriately labeled, enabling a clear distinction between human-created and, in line with the principles of transparency and responsible AI usage.
Support responsible AI usage and development through efficient design, selecting models and tools appropriate to the task, and managing computing resources cost-effectively to reduce energy consumption and environmental footprint impacts of deployed AI models.
Communicate to employees the appeal channels for reporting incidents related to AI systems (AI Incident Reporting), requiring immediate reporting to supervisors or responsible functions upon encountering AI usage or development that does not comply with the policy.

Key Artificial Intelligence Projects

The Company has established the ‘Digitalization – Data and AI Section’ to drive the use of data within the Company, implement Artificial Intelligence (AI) technology more concretely, and promote use cases within the Company to increase their widespread adoption. The following are key projects:

Projects	Details	Quantitative Impact Assessment of AI	Relevant ESG
Electronic Nose Project	Electronic Nose (E-Nose) Application is the use of AI to monitor, detect, and notify the unpleasant odors that arise from the production process and other activities and may affect the employees or surrounding communities. The system is active 24 hours a day, allowing the Company to identify the sources of unpleasant odors and manage them appropriately.	Reduce community complaints regarding odor pollution.	Community Relation Occupational Health and Safety
Inspection Corporate Gen AI (IK-Q) Project	IK-Q (Intelligence – Knowledge – Query) is the use of Generative AI developed to serve as Domain Expert Agent across various fields, such as engineering, technical query resolution, Oil Market analysis, and other specialized knowledge areas. Additionally, the system is capable of performing data analysis and providing preliminary recommendations to support both engineers and general employees.	Reduce work time 10,553 hours/year	Human Capital Development
Predictive Maintenance Analytics Project	Expand the scope of the Predictive Maintenance Analytics project to cover additional machinery and equipment within the production units. The system predicts the likelihood of equipment damage and identifies preventive measures in advance, reducing the likelihood of chemical leaks as well as unplanned shutdowns and unplanned maintenance.	Reduce the likelihood of chemical spills and equipment damage due to lack of prior protection, representing a benefit of 40 million Baht per year.	Risk Management

2025

Performance

Performance
Financial Capital	Cases of cyberattacks affecting the business operations	0 case
Financial Capital	Number of breaches of information security due to cyberattacks (Number of Breaches of Information Security)	0 case
Intellectual Capital	All IT infrastructure with cyber threat risks obtained ISO 27001 certification, including: 1. The Data Center, SAP, and LIMS systems, under the control and management of the Digital Function. 2. Advanced Process Control Network, under the control and management of the Technology Process Control Function, which supports service activities and work processes within the Thaioil Group. 3. Instrument Network, under the control and management of the Instrument Engineering Functions. 4. Telecommunication and ELICS systems, under the control and management of the Electrical Engineering functions.	100%
	Cybersecurity Awareness training for new employees	100% for new employees
	Phishing Email Exercise for employees	4 times per year
	Employee pass rate for Phishing Email Exercise	96%
Social and Relationship Capital	Internal Customer Satisfaction	87%