Information and Cyber Security Framework Overview

This document is a factsheet detailing Babcock's Information and Cyber Security framework designed to protect data and systems against cyber threats. It outlines the significant risks posed by cyber-attacks, including operational disruption and reputational damage, and describes Babcock's comprehensive approach to managing these risks. The framework aligns with international standards and regulatory requirements, emphasizing robust governance and proactive risk management. Key policies such as the Information Security Policy and Acceptable Use Policy are highlighted, along with certifications like ISO 27001:2022 and Cyber Essentials Plus, which demonstrate Babcock's commitment to maintaining high security standards. The document also discusses stakeholder engagement, including collaboration with external partners and the importance of a security-aware culture among employees. Continuous improvement through regular audits and training initiatives is emphasized to ensure the effectiveness of security measures and to address emerging threats.