Page 69 - index
P. 69

67

                                                                                                                                        StarHub Ltd Annual Report 2015

StarHub’s Employee Code of Conduct and Ethics and the                  Strategic Business Continuity Management (BCM)                   Overview
Corporate Gift and Hospitality Policy cover business conduct           StarHub was the first Info-Communications company in
(including employees’ compliance with anti-corruption and anti-        Singapore to be successfully certified to Singapore Standards    Strategy
bribery laws), conduct in the workplace, protection of StarHub’s       SS540: 2008 for Business Continuity Management (BCM) in
assets, proprietary and confidential information and intellectual      May 2011. In May 2014, StarHub successfully converted to         Performance
property, conflict of interest, non-solicitation of customers and      ISO 22301:2013 which is the ISO standard for BCM. StarHub’s
employees, and workplace health and safety. In parallel, the           BCM program focuses on Info-Communications Network,
Supplier and Vendor Policy covers internal controls on tenders,        Infrastructure and Support Services for Mobile, Television,
vendor selection and purchasing to ensure transparency,                Broadband and Fixed. The BCM program is also supplemented
objectivity and compliance.                                            by Pandemic Plan, Haze Response Plan and Crisis
                                                                       Communication Plans to ensure StarHub is able to address
The Employee Code of Conduct and Ethics and the Corporate              different crisis situations.
Gift and Hospitality Policy are available on StarHub’s intranet,
while the Supplier and Vendor Policy are available on both             Security Measures for Data Protection
StarHub’s intranet and corporate website for easy access.              In addition to the Laptop Encryption Solution, StarHub has
                                                                       implemented Mobile Device Management (MDM) to ensure
Compliance Leave Policy                                                commercially sensitive and confidential corporate emails and
StarHub has a Compliance Leave Policy which applies to                 information accessed by employees using their mobile devices
employees who hold Senior Manager position and above, finance          are protected. In the event an employee’s mobile device is
advocates and employees with sensitive job functions such as           lost or stolen, MDM will remove corporate data stored on the
handling monies, inventories, payroll processing and approvals,        mobile device by performing a remote factory reset. Both the
risk management and purchasing of goods and services. Under            Laptop Encryption Solution and the MDM enhance the security
the Compliance Leave Policy, such employees are required to go         of StarHub’s commercially sensitive and confidential corporate
on mandatory block leave of at least five consecutive working          data accessed through or stored on such mobile devices and
days each calendar year. This arrangement allows covering              laptops by employees. On an on-going basis, StarHub continually
officers to fully step into the duties of the employee on leave, as    evaluates new technologies which may further enhance the
an additional check and balance against any breaches. This is          security of its confidential and sensitive information. StarHub
an additional risk mitigation measure voluntarily put in place to      has put in place a comprehensive Personal Data Protection
enhance governance.                                                    compliance program to ensure compliance with the law.

Document Classification Policy                                                                                                          Governance & Sustainability
StarHub has a document classification policy to guide employees
in their handling of information and documents relating to the
Group’s business, activities and operations. Such information and
documents are required to be classified as “Confidential”, “For
Internal Use” or “For Public Distribution”. This classification helps
to safeguard the information and documents, ensures that only
appropriate persons have access to that information and that
access is on a need-to-know basis only.

                                                                                                                                        Financials
   64   65   66   67   68   69   70   71   72   73   74