Our dedication to sustainability demands that we continue to have dynamic, committed, and visionary leadership. Our effective, sustainable governance system controls goal-setting and reporting processes, encourages relationships with internal and external stakeholders, and maintains overall accountability to help us implement our vision across our operations. For efficient management and execution of the sustainability initiatives, we have established a governance structure as given below:
We have board approved policies and SOPs for each department which covers all governance aspect in detail. We have developed an Environmental & Social Management System which lists down identified ESG risks and effective systems of internal control and risk management covering all significant ESG aspects. We engage with all our regulators & stakeholders, both internal as well as external, at regular intervals, in a constructive manner. We promote best practices and uphold high standards in relation to corporate governance including transparency, honesty, integrity, fair working conditions, diligence and ethics in all business dealings. We have a policy in place to prohibit contributions to political parties or political candidates, where these could constitute conflicts of interest. Business activities identified with negative E&S impact are listed as prohibited investment activities and are not financed in line with ADB & IFC guidelines.
We monitor, evaluate, and enhance the ESG performance with respect to environmental consciousness, financial sustainability and improved governance, through appropriate performance indicators; and ensure that stakeholder grievances are addressed satisfactorily.
We have established a well-specified governance structure for information security and data protection. We have constituted an Information Technology Strategy Committee and adopted a Board approved Information Technology Policy covering Information Security governance. It is a management level committee with cross functional representation, meets on quarterly basis to review security implementation across the organization and provide guidance to the information security function.
The Board-level Risk Management Committee monitors information/ cyber security related risks as part of the organization’s overall risk profile and provides guidance and direction on information security. We are also following the Cert-in & ReBIT advisories on a regular basis and implementing the changes to ensure protection against global cyber security threats.
We have adopted a Risk Based approach and follows defense-in-depth to protect its information systems against cyber-attacks. IT risk assessment and Vulnerability Assessment & Penetration Testing is being assessed by an independent entity on an annual basis.
The Kogta Financial (I) Limited has established an in-house team to monitor Cyber Risks, which keeps vigil on suspicious network traffic and events to detect any anomalies and helps respond to potential incidents, in a timely manner. We are also subscribing to various threat intelligence services that help identify malicious indicators of compromise (IOCs) and block them as a proactive approach to prevent potential attacks.