Company: WIT
Filing Date: 2025-05-22
Form Type: 20-F
Source: 0000950170-25-076303
Chunk: 182

Company: WIPRO LTD
Filing Date: 2025-05-22
Form: 20-F
Item: Item 16K
Chunk 182
---
Item 16K. Cybersecurity
Cybersecurity risk management is an integral part of our overall enterprise risk management program. Our cybersecurity risk management program is managed by our Chief Information Security Office (“CISO”) function. Our cybersecurity risk management framework is defined and implemented to identify, assess and manage cyber risks for our information assets. Cybersecurity risks are tracked and monitored by the risk owners and governed by the CISO to maintain them within acceptable levels.
Threats and vulnerabilities are identified, and cybersecurity risks are assessed based on their potential impact on the confidentiality, integrity, and availability of information systems and facilities. Identified cybersecurity risks are analyzed based on the likelihood of a threat occurrence and its impact on business operations, and risk treatment plans are prepared and implemented accordingly. Cybersecurity risk assessment results and the status of the risk treatment plan are reviewed by management on a periodic basis.
We assess and govern the cybersecurity program using selected industry best practices and frameworks from the International Organization for Standardization and the National Institute of Standards and Technology. The framework includes policies, standards and procedures that help assess and identify our cybersecurity risks and inform how security measures and controls are implemented and maintained. For assessing risks, multiple factors are considered including likelihood and severity of risk, impact on the Company if a risk materializes, feasibility and cost of controls and impact of controls on operations.

 --

We periodically assess the cybersecurity risk posture of acquired entities to ensure relevant security measures are in place. Through regular monitoring and evaluations, we identify and mitigate potential vulnerabilities before they can become significant risks to the organization.
To help protect us from any major cybersecurity incident that could have a material impact on our operations or financial results, we have implemented controls, including technology investments that focus on cybersecurity incident prevention, identification and mitigation. The steps taken to reduce vulnerability to cyberattacks and to mitigate impacts from cybersecurity incidents include, but are not limited to establishing information security policies and standards, implementing information protection processes and technologies, monitoring our information technology systems for cybersecurity threats, assessing cybersecurity risk profiles of key third-parties, implementing cybersecurity training and collaborating with external organizations on cyber threat information and best practices. We have implemented a Cybersecurity Incident Response Procedure, which is integrated into our overall crisis management program. The procedure provides a plan for responding to cybersecurity incidents.

We maintain internal resources to perform penetration testing designed to simulate evolving tactics and techniques of real-world threat actors, engage with industry partners and conduct tabletop exercises on an as-needed basis. We also engage independent third parties to perform red teaming and breach attack simulation exercises periodically. We require key