logo

– Strengthening Practical Cybersecurity Capabilities and Maintaining Zero Security Incidents for Three Years

OCI Holdings has continued its efforts to enhance employees’ information security awareness and strengthen the organization’s cyber incident response capabilities by conducting company-wide phishing email simulation training for the third consecutive year since 2023.

In 2025, a total of four rounds of simulations were conducted—two in the first half (May 19–28) and two in the second half (October 20–29). Each round was designed using a variety of real-world, scenario-based phishing techniques to comprehensively assess employees’ response capabilities.

The simulations incorporated diverse social-engineering tactics and realistic malicious email formats to closely mirror actual cyber-attack conditions. Employee behavior—such as opening emails, clicking embedded links, and downloading or executing malicious files—was systematically analyzed to evaluate overall security awareness across the organization.

OCI Holdings transparently shared the results and identified vulnerabilities with all employees and simultaneously distributed guidance on recognizing suspicious emails and responding appropriately. This recurring, company-wide training has contributed to meaningful improvements in risk recognition and response maturity.

As a result of these continued efforts, OCI Holdings has recorded zero information security incidents over the past three years (2023–2025)—demonstrating that regular training and structured response processes are effectively reducing real-world risks.

OCI Holdings will continue to institutionalize practical, scenario-based security training and further strengthen its information protection framework to enhance cyber resilience across the organization.

In May 2025, the company also completed a comprehensive overhaul of its Information Protection Policy and 15 subordinate regulations. This update reinforces OCI Holdings’ ability to proactively address emerging cyber threats and better protect all corporate information assets.