Vision & Commitments
Our Business
Sustainable Solutions
Governance
Environmental Performance
Our People
ICL is implementing a global program to protect its information technology (IT) and industrial control systems (ICS). Following NIST best practice, this program includes separating information networks from computerized process networks, physical protection of computer rooms, servers, terminals, and employee training. Cyber IT personnel have been appointed, an approach to address the challenges has been formulated, and work plans have been prepared and implemented globally. ICL has implemented a cybersecurity policy, along with cyber-attack and crisis management procedures for all of its operations, and performed risk surveys in all plants in Israel and in several plants located in other countries. Cyber steering committees have also been nominated.
For more information see ICL 2022 Annual Report (p.129)
Each year ICL’s IT department undergoes one to three security breach simulations which are assessed by an external auditor.
As part of ICL's global effort to maintain a high standard of information security, and to support current and future needs, IT cyber security and CISO teams implement mobile threat defense solutions. These defenses provide continuous, on device protection for mobile devices, analogous to traditional antivirus protection with advanced technology capabilities.
All IT and OT company and contractor employees participate in mandatory workshops and virtual training sessions on IT topics. In 2022, security awareness training took place in all ICL production sites, and fraud and ransomware awareness training was provided for finance, marketing, projects and IT departments. Cyber security drills also took place in some other ICL’s sites. Since 2019, cyber security training has been provided to the ICL IT Department. In 2022, a managerial tabletop cyber security drill was conducted, with participation of external experts.
During ICL’s Global ESG Week, cyber security and other IT activities were presented, as part of multiple virtual events alongside live events. During the ESG week, employees and contractors gained awareness on topics such as information management, cyber security and data privacy.
For additional information regarding ICL Global ESG Week see (link).