69 / 98
Principal risk
Context
Mitigating actions
Strategic
Objective
08
Cyberthreat
(All markets)
Speed of impact:
Very rapid
Rating:
Down
(2017: 2)
An external cyberattack, insider threat or
supplier breach – malicious or accidental
– could result in service interruption
and/or the breach of confidential data,
with resulting negative impacts on
customers, revenues and reputation, and
potential costs associated with fraud
and/or extortion.
•
World-class monitoring centres to identify attacks timeously.
•
Conduct detailed scenario planning on an ongoing basis.
•
Ensure that networks and infrastructure built with security in
mind.
•
Implement controls based on world-class industry standards.
•
Continuous improvement programmes in place to mitigate
against risks.
•
Assurance programme that incorporates both internal and
external reviews of third parties that hold data on our behalf.
•
Layers of security control applied to all applications and
infrastructure that store or transmit confidential personal and
business voice and data.
09
Unstable
economic and
market
conditions
(All markets)
Speed of impact:
Rapid
Rating:
Down
(2017: 6)
The mobile communications industry is
often subject to unpredictable and
higher direct and indirect taxes in our
countries of operation. Other volatile
macroeconomic conditions – such as
fluctuating foreign exchange and
inflation rates – can weaken Consumer
and Enterprise spend, reducing revenue
and impacting negatively on operating
costs and capital expenditure.
•
Comprehensive stakeholder relations strategy in all our
operations.
•
Specialised tax management capability, and seek expert tax
advice as needed.
•
Adjust our products and services to continue to serve
customer needs.
•
Group Treasury Policies applied in all our markets.
•
Include contingencies in our business plans to provide for the
negative operational impacts that could arise from lower
economic growth, and changes in interest, inflation and
exchange rates.
•
Implemented a global cost-savings programme to combat
the effects of inflationary pressure on costs.
10
Non-compliance
with laws and
regulations
(All markets)
Speed of impact:
Slow
Rating:
Down
(2017: 9)
We operate in a complex and heavily
regulated environment. A breach of
regulatory requirements could expose
Vodacom to significant financial and
reputational damage.
•
All new products and services are reviewed for compliance
with all applicable laws and regulations before being
approved for launch.
•
All distribution channel agreements are updated to
continuously comply with legislative requirements.
•
Subject matter experts in our legal and regulatory teams at a
local and global level who advise on strategy and manage
policy and risk issues.
•
Policy of zero-tolerance towards bribery by any employee or
third party operating on our behalf.
•
Robust, proportionate, risk-based controls to prevent, detect
and report money-laundering and terrorist financing.
•
Combined Assurance Programme on regulatory compliance,
governed by the Group Audit, Risk and Compliance Committee.
Digital Organisation
and Culture
Best
Technology
Best Customer
Experience
Segmented
Propositions
Our Brand and
Reputation
Our strategies
65
Our business
Our performance
Our governance
Administration