2024 Cyber Security Factsheet

1

Culture, training and awareness

Vodafone Group Plc Cyber Security Factsheet 2024

Introduction

Strategy

Risk management

Our operating model

Threats and incidents Compliance

Introduction

Contents

Highlights

Our role is to enable connectivity in society. As a provider of critical national infrastructure and connectivity that is relied upon by millions of customers, we prioritise cyber and information security across everything we do. Cyber attacks are part of all our lives today and will be in the future. All organisations, governments and people will be subject to cyber attacks and some will be successful. The telecommunications industry is faced with a unique set of risks as we provide connectivity services and handle communication data. Our operating model and strategy are designed based on this threat landscape, and we implement controls that prevent, detect and respond to attacks to minimise impact. This factsheet provides detail on our approach to managing cyber risk at Vodafone, as well as how we protect our customers from cyber threats. Our cyber security strategy is aligned to the Company’s strategy and focused on the actions we need to take to protect our customers and society now and in the future.

Strategy 02 Our cyber security strategy 02 Customers 03 New technologies, industry collaboration Risk management 04 Identification of vulnerabilities and risks 04 Risk and control approach Our operating model 06 Our approach to cyber security 07 Governance Culture, training and awareness 08 Training and awareness

Our vision a secure connected future for our customers and society Global scale through consistent cyber security baseline, global telemetry and deep expertise 900 employees in-house international team of experts 9 million consumers and businesses use our cyber security solutions to protect themselves

ISO 27001 certified

across our global technology function and 11 1 local markets

08 Growing our skills 08 The Cyber Code Threats and incidents

Independent testing Mandatory cyber training

of our mobile networks every year

09 Threat landscape and intelligence 09 Cyber operations and incidents Compliance 10 Securities and Exchange Commission cyber security disclosure requirements

Videos

with cyber incident simulations run leadership teams

Scan or click to watch our Chair talk about the importance of cyber security during his Board site visit: investors.vodafone.com/videos Scan or click to watch our Group Chief Executive talk about the importance of cyber security: investors.vodafone.com/videos

Contribution to UN Sustainable Development Goals (‘SDGs’)

Note: 1. Excludes Vodafone Italy and Vodafone Spain.

Powered by