Hutchison Port Holdings Trust - Annual Report 2025

SAFETY AND SECURITY Ensuring productive and uninterrupted operations at HPH Trust hinges on providing a safe and secure work environment. The port industry is characterised by significant health and safety risks – due to the presence of heavy machinery, container boxes and potentially hazardous materials – which can affect the wellbeing of employees, external contractors and port users. Robust and dependable digital infrastructure, including systems like the terminal management platform nGen, is essential for safe and efficient port operations. The Trust prioritises the mitigation of operational risks through a structured hierarchy of controls. In 2025, regular internal safety inspections and audits were conducted to identify and mitigate potential hazards. The Safety and Health committees, comprising senior executives and frontline supervisors from both HIT and YANTIAN, play a key role in identifying workplace hazards and implementing appropriate safety measures. Furthermore, the Trust continues to embrace digitalisation and advanced technology in its operations. Stringent standards, policies, and procedures are in place to protect critical information and data from cyber threats. WHY IT MATTERS Cybersecurity threats and breaches involving confidential data can lead to reputational damage, operational disruptions, financial losses, and regulatory fines. Such incidents can undermine stakeholders’ trust and negatively impact the operations of the Trust. Similarly, onsite accidents stemming from health and safety hazards can result in injuries and harm the wellbeing of workers and local communities. Ensuring safety and security is therefore critical to mitigating potential adverse effects and maintaining smooth business operations. HOW HPH TRUST RESPONDS The Trust has put in place strict policies and guidelines, and robust health and safety management systems, that comply with international standards. These measures are designed to minimise safety and security risks for employees and IT systems. Additionally, the Trust has launched several initiatives aimed at improving safety performance and increasing awareness across its operations. RELATED SDGs ANNUAL REPORT 2025 63 SUSTAINABILITY REPORT IT SYSTEMS AND DATA SECURITY Due to its essential role in global trade, the maritime industry is increasingly targeted by cyber threat actors, especially as ports integrate more smart technologies to enhance operational efficiency and promote interconnectedness. The Trust acknowledges the importance of establishing a mature cybersecurity strategy with a strong focus on information and data security. The Trust aims to protect its core IT systems from potential cyber attacks and unauthorised access to sensitive data. To bolster digital infrastructure and data protection, the Trust employs multi-layered security strategies. Both HIT and YANTIAN regularly conduct phishing simulations and provide relevant trainings to enhance cybersecurity awareness among their workforces. Additionally, cybersecurity drills are performed to improve employees’ ability to handle these incidents promptly and effectively. Collaborative information security drills with local law enforcement agencies are also conducted to address critical infrastructure vulnerabilities. The Trust aligns its data security strategies with industry best practices. HIT has achieved ISO 27017 certification, indicating that its information security controls for cloud services meet international standards. Both HIT and YANTIAN have obtained ISO 27001 Information Security Management certification, and both underwent an annual external audit in 2025. Annual data recovery tests and regular internal and external audits are conducted to ensure the effectiveness of cybersecurity management.

RkJQdWJsaXNoZXIy NTM2MDQ5