CFSL Integrated Report 2025

CORPORATE GOVERNANCE

120

Risk Management

Statutory Disclosures

Financial

3.1.15 Information, Information Technology (IT) and Information Security Policy The Board oversees information governance within the organisation and ensures that the performance of information and information technology (IT) systems leads to business benefits and creates value. The Group has adopted various IT policies, namely a Firewall Policy, which was implemented to mitigate the risks associated with security threats, and a Data Privacy Policy, which complies with the requirements of the Data Protection Act 2017 and aims to protect and ensure the confidentiality of personal or sensitive personal data. The Group has also adopted a Data Retention and Disposal Policy to minimise data storage amount and retention time. Matters of importance with regard to information security policies are also taken up by the Risk Management Committee and recommendations are submitted to the Board for approval. The Board, through its committees, ensures that proper policies have been implemented for the protection of the Company’s information assets. Policies have also been set up to protect the integrity, ensure the confidentiality and control the usage of and access to the information essential for the smooth running of the Company’s business activities. Furthermore, awareness sessions are held for staff on cybersecurity risks through Cornerstone the e-learning platform of the Group, contributing to the improvement of the Information Security framework. It also runs a periodic Vulnerability and Penetration testing assessments to identify any potential cyber security threats and take immediate actions to secure data and assets. The Board approves material investments in information technology and security, as set out in the annual budget, according to the business needs of the Group. 3.1.16 Relations with Shareholders and Other Stakeholders The shareholding structure of CFSL as at 30 September 2025 is as follows:

ELGIN LTD (Elgin)

100%

CIM HOLDINGS LTD (CHL)

OTHERS*

53%

47%

100%

THE COMPANY

*The National Pensions Fund and State Insurance Company of Mauritius Ltd have a direct interest of 5.06% and 5.41% respectively in the share capital of the Company. No shareholders’ agreement which could affect the governance of the Company has been disclosed to the Board and/or the Company.