{"id":2841,"date":"2026-06-30T14:32:46","date_gmt":"2026-06-30T07:32:46","guid":{"rendered":"https:\/\/www.vichaivej.com\/sustainability\/?post_type=governance&#038;p=2841"},"modified":"2026-07-21T09:58:08","modified_gmt":"2026-07-21T02:58:08","slug":"data-cybersecurity","status":"publish","type":"governance","link":"https:\/\/www.vichaivej.com\/sustainability\/en\/governance\/internal-control-data-security\/data-cybersecurity\/","title":{"rendered":"Data &#038; Cybersecurity"},"content":{"rendered":"<span data-contrast=\"auto\">ichaivej\u00a0International Hospital Group prioritizes personal data protection and information security by integrating cybersecurity risk management into its corporate strategy, strengthening proactive monitoring, and reporting zero material data leakage incidents in 2025.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n\r\n<span data-contrast=\"auto\">Trust is a core foundation of the healthcare business. The Group therefore places strong emphasis on personal data protection and information\u00a0security, and\u00a0treats data governance and cybersecurity as an integral part of its broader risk management and corporate governance framework.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n\r\n<span data-contrast=\"auto\">The Group has\u00a0established\u00a0relevant policies to guide governance and operational practices, including:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><a href=\"https:\/\/www.vichaivej.com\/sustainability\/wp-content\/uploads\/2026\/06\/PL-VIH-GLD-012-\u0e19\u0e42\u0e22\u0e1a\u0e32\u0e22\u0e04\u0e38\u0e49\u0e21\u0e04\u0e23\u0e2d\u0e07\u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25\u0e2a\u0e48\u0e27\u0e19\u0e1a\u0e38\u0e04\u0e04\u0e25-1.pdf\"><b><span data-contrast=\"auto\">Personal Data Protection Policy<\/span><\/b><\/a><\/li>\r\n<\/ul>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"7\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><a href=\"https:\/\/www.vichaivej.com\/sustainability\/wp-content\/uploads\/2026\/06\/PL-VIH-GLD-006-\u0e19\u0e42\u0e22\u0e1a\u0e32\u0e22\u0e04\u0e27\u0e32\u0e21\u0e21\u0e31\u0e48\u0e19\u0e04\u0e07\u0e1b\u0e25\u0e2d\u0e14\u0e20\u0e31\u0e22\u0e14\u0e49\u0e32\u0e19\u0e40\u0e17\u0e04\u0e42\u0e19\u0e42\u0e25\u0e22\u0e35\u0e2a\u0e32\u0e23\u0e2a\u0e19\u0e40\u0e17\u0e28-2568-final-1.pdf\"><b><span data-contrast=\"auto\">Information Security Policy<\/span><\/b><\/a><\/li>\r\n<\/ul>\r\n<b><span data-contrast=\"auto\">Governance and Key Measures<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n\r\n<span data-contrast=\"auto\">The Group integrates cybersecurity risk management into its corporate strategy\u00a0in order to\u00a0strengthen preparedness to\u00a0<\/span><b><span data-contrast=\"auto\">prevent, detect, and respond<\/span><\/b><span data-contrast=\"auto\">\u00a0to information technology risks on an ongoing basis. Key measures include:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Establishing written policies and practices on data protection and information security\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Reviewing the Information Security Policy at least annually, or when significant changes occur\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Defining clear responsibilities for management, users, and relevant external parties\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">Communicating policies and training new employees to ensure proper compliance\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<ul>\r\n \t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"8\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"auto\">Strengthening proactive monitoring and information security control measures\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span><\/li>\r\n<\/ul>\r\n<b><span data-contrast=\"auto\">2025 Performance<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n\r\nIn\u00a02025, the Group reported\u00a0zero material data leakage incidents<span data-contrast=\"auto\">\u00a0and continued to strengthen its proactive monitoring and control measures throughout the year, reflecting the effectiveness of its preventive approach and incident readiness.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n\r\n<span data-contrast=\"auto\">At the oversight level, management places importance on information technology risk and personal data security, while the Audit Committee continues to\u00a0monitor\u00a0compliance with relevant laws, including the Personal Data Protection Act (PDPA).\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:200,&quot;335559740&quot;:276}\">\u00a0<\/span>\r\n\r\n<span data-contrast=\"auto\">The Group\u00a0remains\u00a0committed to building digital trust through structured personal data protection and information security management, supported by clear oversight, proactive measures, and regular policy review. This helps ensure that information entrusted to the Group by patients and stakeholders is managed appropriately, securely, and responsibly over the long term.<\/span>","protected":false},"parent":2830,"menu_order":2,"template":"","_links":{"self":[{"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/governance\/2841"}],"collection":[{"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/governance"}],"about":[{"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/types\/governance"}],"version-history":[{"count":2,"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/governance\/2841\/revisions"}],"predecessor-version":[{"id":3202,"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/governance\/2841\/revisions\/3202"}],"up":[{"embeddable":true,"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/governance\/2830"}],"wp:attachment":[{"href":"https:\/\/www.vichaivej.com\/sustainability\/wp-json\/wp\/v2\/media?parent=2841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}