This document is a Data Breach Incident Response Plan that outlines the comprehensive approach taken by stc to address cybersecurity incidents and data breaches. It emphasizes the importance of early detection and rapid response to mitigate impacts on customers, partners, and stakeholders. The plan details the structure of the Incident Response Program, which consists of four core functions: Identification & Triage, Response Coordination & Guidance, Forensic Analysis, and Incident Reporting. Each function is designed to ensure systematic and effective responses to incidents. The document also describes the roles and responsibilities of the incident response team, the methodologies employed for incident detection, and the importance of compliance with national regulations and international best practices. Furthermore, it highlights the collaboration with regulatory bodies and the integration of sustainability into cybersecurity operations, reinforcing stc's commitment to strong cybersecurity practices.