The company has a programme to design and operate IT and digital process control systems to manage risk to system and information integrity, availability and confidentiality