Phuthuma Nathi IAR 2023

Technology Cybersecurity Securing content Technology is integral to our strategy and operations, e.g. the availability and stability of the billing system is critical to the achievement of our strategic objectives. In addition, the stability and scalability of the DStv via Streaming app is imperative to drive our OTT initiative. The security of our information assets, including content and customer and employee information, is critical. Failure to protect these assets poses a legal and reputational risk. Access to quality content at the right price is a major business consideration. Content rights, for both general entertainment and sport, are highly sought after with increased competitive activity in our markets likely to impact content renewals over time Further, local currency weakness against hard currencies can lead to increased costs. • We invest in improving our existing systems and platforms, and monitoring, innovating and collaborating to offer increased value to customers, which are all a key part of our business plan. • Our IT controls framework, based on Control Objectives for Information and Technologies (COBIT) framework, continues to be implemented in new developments, changes and error corrections. The framework’s robustness is regularly reviewed. • Signi cant improvements to simplify billing and business rules were implemented during the year. • We have announced a syndication deal with Sky on Sky Glass which will leverage its connected hardware and aggregation software. • Rigorous testing programmes are implemented for all software updates and rollouts for our internal systems and platforms. • Redundancy in key equipment and platforms was built at the disaster recovery site at our Samrand and Isando operational facilities. • All departments related to technology were merged into one technology hub lead by the Group Chief Technology Of cer to drive focus areas. • We continuously invest in systems and technology to identify vulnerabilities and prioritise the remediation thereof to enhance systems security and reduce business interruptions. • We employ a chief information security of cer and chief data of cer to ensure appropriate management attention to this critical risk. • Controls over information assets are continuously tested, e.g. through unauthorised access and systems penetration testing, and policies are implemented to address information security risks, e.g. around information security incident management and acceptable usage of the group’s technology devices and resources. Focus is also placed on the content value chain and protection of customer and employee information. For example, we ensured full compliance with the Protection of Personal Information Act (POPIA) and increased our insurance cover to mitigate against risks. • International studios undertake security assessments from time to time in support of their agreements with us. • We have maintained our Content Delivery and Security Association (CDSA) certi cation. • Rights are regularly reviewed with due consideration for the economic value of each set of rights, and bids are tabled accordingly. • We bid for and secure a broad set of popular and more niche sporting rights, according to rights cycles as determined by sport rights owners. • We continue to aggressively increase our investment in local content. • We maintain our relationships with rights owners to maximise mutual bene ts. • We license international content and partner with third-party streaming services to provide a compelling aggregation service in our linear environment. Phuthuma Nathi Investments (RF) Limited Integrated annual report 2023 47 Overview Introduction Understanding Phuthuma Nathi Understanding MultiChoice SA MultiChoice SA performance Financial review Corporate governance review Shareholder information

RkJQdWJsaXNoZXIy MTAwNDEy