{
  "docId": "019dd923-5eff-723e-9be7-d26e8b9c7415",
  "docSlug": "db9dd26ce4c89573",
  "documentTitle": "2024 Annual Report",
  "authorId": "TUI-Group",
  "authorName": "TUI Group",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.777,
  "pageNumber": 42,
  "pageCount": 286,
  "prevPage": 41,
  "nextPage": 43,
  "slideType": "risk_register",
  "function": "diagnose",
  "density": "overcrowded",
  "nDataPoints": 0,
  "notes": "Page 42 of a financial report, includes a table of contents sidebar.",
  "elementsJson": [
    "paragraph",
    "bullet_list"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5eff-723e-9be7-d26e8b9c7415/42",
  "deckHref": "/decks/019dd923-5eff-723e-9be7-d26e8b9c7415",
  "deckJsonHref": "/decks/019dd923-5eff-723e-9be7-d26e8b9c7415.json",
  "deckAnchorHref": "/decks/019dd923-5eff-723e-9be7-d26e8b9c7415#slide-42",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "Our responsibility is to protect the confidentiality, integrity and availability of the data we process for our customers, employees, and businesses.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-832e-76b9-8119-f01ac2fec0ce",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.36,
        "x": 0.57,
        "y": 0.14
      },
      "kind": "list",
      "text": "Continued commitment from the Executive Board... TUI's Information Security Management System... We keep people safe... Security is integrated... Our security risk assessment methodology... We continue to increase the maturity... Continuous improvement...",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d8aca058-033b-4e27-8fd8-a65e495fadf3",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.36,
        "x": 0.19,
        "y": 0.14
      },
      "kind": "paragraph",
      "text": "Our responsibility is to protect the confidentiality, integrity and availability of the data we process for our customers, employees, and businesses.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "4a04b16c-5f22-4763-9ce9-99c00726383d",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.36,
        "x": 0.19,
        "y": 0.28
      },
      "kind": "paragraph",
      "text": "If we do not ensure we have the appropriate level of security controls in place across the Group, this could have a significant negative impact on our key stakeholders, associated reputational damage and potential for financial implications.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "b32ec040-ab0f-4641-84cd-6d25d0c1536f",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.09,
        "w": 0.36,
        "x": 0.19,
        "y": 0.18
      },
      "kind": "paragraph",
      "text": "This is an evolving risk due to increasing digitalisation, our supply chain, emerging technologies such as generative AI, growing global state-run or private cyber-crime activity and more regulation (e. g. EU GDPR, EU AI Act, EU NIS2 Directive). Our consolidation under the TUI brand and increasing dependence on digital sales and customer care increases our exposure and the potential worst-case impact of a successful cyber-attack and/or data breach.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d1b39b8c-2631-4f8c-b9f8-89bad6381fc0",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.015,
        "w": 0.12,
        "x": 0.19,
        "y": 0.115
      },
      "kind": "title",
      "text": "4. CYBER SECURITY",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a6f818eb-3371-4a3f-a611-88324a8ca657",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.01,
        "w": 0.08,
        "x": 0.19,
        "y": 0.075
      },
      "kind": "title",
      "text": "Nature of risk",
      "attrs": null,
      "subkind": "subtitle",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "8b5416f8-469d-4f41-9261-a5d045aebf3c",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.01,
        "w": 0.08,
        "x": 0.57,
        "y": 0.075
      },
      "kind": "title",
      "text": "Mitigating factors",
      "attrs": null,
      "subkind": "subtitle",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d5069505-177f-4814-b36a-45f7b1eb22e8",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [],
  "arcBeats": [],
  "loops": [
    {
      "to": 45,
      "from": 40,
      "name": "Cost Of Inaction",
      "slug": "27-cost-of-inaction",
      "bestFor": "Urgent budget requests, compliance, risk mitigation",
      "matchId": "102df71e-d964-45cf-8456-fd55cf1df3b8",
      "evidence": "The document discusses risks such as climate change and cyber security threats",
      "position": 1,
      "objective": "Highlight the risks of not addressing sustainability and risk management",
      "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point",
      "confidence": 0.6,
      "description": "Quantify what happens if the audience does nothing"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}