Information Security: Protected, Resilient, Secured

Safeguarding the security and confidentiality of our information systems is critical to ensuring smooth and uninterrupted operations. At SRF, we have a well-defined cyber risk management policy in place, supported by robust systems designed to prevent and respond to cyber threats effectively. We have implemented a variety of systems to mitigate cybersecurity risks, including SentinelOne Antivirus and Endpoint Detection and Response (EDR), layered firewalls with critical zone segregation, and Netskope Secure Web Gateway. Our security framework also incorporates Zero Trust Network access, Cloud Access Security Broker (CASB), and secure identity management with Multi-Factor Authentication (MFA).

Additionally, we have robust controls such as secure data centres, encrypted protection of intellectual property using IRM solutions, and the use of secure VPNs to prevent unauthorised access or data exfiltration. Alongside technical measures, we regularly conduct employee awareness sessions to build cyber readiness across the organisation and foster a culture of digital responsibility.

During the year, we established a robust hybrid cloud infrastructure, successfully migrating all core applications to Oracle Cloud Infrastructure and Microsoft Azure. Network optimisation ensured shortest-path connectivity from all manufacturing sites to cloud data centres, enabling seamless application performance. This migration was executed with zero disruption and has resulted in improved efficiency and reliability across systems. We embedded advanced cloud security protocols within the infrastructure design, leading to stronger segregation, granular access controls, and enhanced protection against external threats and data exfiltration risks. The upgraded infrastructure now offers high scalability, supporting our long-term digital and business growth objectives.

To safeguard and manage personal and customer data breaches, we have implemented several measures. All laptops and PCs are encrypted, and USB access is restricted for users. Our Cloud Access Security Broker solution prevents access to public cloud storage. Additionally, Data Loss Prevention (DLP) tools monitor the movement of intellectual property and block unauthorised data transfers. Access to servers and databases is limited to privileged users and is subject to monitoring. Furthermore, we utilise the services of Cyble for Dark Web monitoring to detect any instances of our data being published.

Further, we strengthened our cybersecurity framework by deploying modern security solutions such as secure web gateways, zero trust network architecture, and cloud access security broker (CASB) capabilities. To mitigate email-based threats, we introduced AI-driven mail threat detection to proactively counter phishing attacks. In parallel, we conducted a comprehensive security assessment of our Manufacturing Operations Technology (OT) landscape and implemented enhancements to fortify its resilience.

As part of our trainings and awareness on cyber security, we organised multiple training sessions to enhance employee awareness on IT infrastructure. The trainings included e-learning security awareness solution provided by Trend Micro i.e., the Phishing Insight program. This training is conducted periodically and covers a range of security threats, including phishing, identity theft, safe browsing practices, data protection, social engineering, malware protection, and business email compromise, among others.

For more details on mitigating cybersecurity risks, please refer to Principle 9 of our BRSR Report.

Digitally Enhanced

To accelerate our enterprise-wide transformation, we have invested in advanced, scalable digital platforms focussed on process digitisation, digital workflows, analytics, automation, mobile applications, and cloud-based solutions. These initiatives have significantly enhanced our productivity, decision-making capabilities and modernised our IT infrastructure with cutting-edge technology.

During the year, we transitioned from manual processes to digital formats using Business Process Management software and Low Code/No Code solutions. This shift has allowed us to replace paper-based workflows with efficient digital alternatives thereby saving time and become less error-prone. The initiatives include the automation of Advance Requisition, Sanction Note approvals, Master Data management and processing of vendor bills by the Shared Services Centre (SSC). Additionally, we have implemented energy efficiency IoT shop floor digitisation projects across multiple plants, further enhancing our operational efficiency.