At JSW Steel, we have implemented a comprehensive cybersecurity framework to protect sensitive corporate data and operational technology (OT), ensuring integrity, confidentiality, and availability of information assets. Led by the Chief Information Officer, our approach includes ISO 27001:2013 compliance, next-generation firewalls, unified threat management systems, and the Purdue model for secure IT-OT communication. We conduct regular vulnerability assessments, penetration testing, and cloud security risk reviews, alongside continuous monitoring and phishing simulations. Advanced measures such as dark web monitoring, Endpoint Detection & Response (EDR), Network Access Control (NAC), and multi-factor authentication (MFA) for critical services strengthen our defenses. Additionally, we subscribe to cyber insurance, deploy DDoS prevention mechanisms, and run awareness programs across all locations to mitigate evolving threats. These initiatives collectively enhance resilience and safeguard business continuity in an increasingly digital world.
