Company: TCMFF
Filing Date: 2025-02-28
Form Type: 20-F
Source: 0001104659-25-019133
Chunk: 245

Company: TELECOM ARGENTINA SA
Filing Date: 2025-02-28
Form: 20-F
Item: Item 16K
Chunk 245
---
ITEM 16K. CYBERSECURITY.
​
Risk Management and Strategy
​
We maintain a comprehensive process for assessing, identifying, and managing risks from cybersecurity threats, including risks relating to disruption of business operations or financial reporting systems, data breach; violation of privacy laws and other litigation and legal risk; and reputational risk. We have developed a cybersecurity policy based on the guidelines and criteria contemplated by the international standards ISO 27001 and ISO 27002, as well as control mechanisms, technologies, processes, and procedures developed on the basis of the guidelines and criteria addressed by Law No. 25,326 (on personal data protection) and the Payment Card Industry Data Security Standard (PCI DSS).
​
We have a dedicated cybersecurity structure - the Department of Cybersecurity, under the CTO, led by a Chief Information Security Officer (CISO) and further composed of the Departments of i) Architecture Development & Engineering, ii) Business Information Security Officer (BISO) Enablers Community, iii) Cyber Defense Center, and iv) Governance, Risk, Compliance & Incidents (“GRCI”). The functions of our Department of Cybersecurity have been integrated into the Company’s general risk systems and processes by incorporating the BISO Department teams by business.
​
The Department of Cybersecurity is responsible for establishing a set of preventive and reactive measures that affect data processing and enable the protection of information. In addition, it conducts the analysis and evaluation of risks related to cybersecurity threats that may impact the Company, in coordination with the GRCI Manager and other cybersecurity leaders. It also ensures the security of computer systems, electronic systems, networks, computers, servers, and data from malicious attacks. The CISO is responsible for reporting the findings to the Company’s Management. (For further information, see below “—Governance - Management”).
​
Key functions of the Department of Cybersecurity include:
​

-   Preventing unauthorized individuals, entities, or processes from accessing or modifying information;
--------------------------------------------------------------------------------------------------------

-   Ensuring that all critical business services and information are available when required for authorized users, entities, or processes;
------------------------------------------------------------------------------------------------------------------------------------------

-   Identifying risks and proposing security solutions to respond to and monitor them;
--------------------------------------------------------------------------------------
​
​

PART II   TELECOM ARGENTINA S.A.
--------------------------------

-   Overseeing, communicating, and executing technical implementations of security solutions for business objectives;
---------------------------------------------------------------------------------------------------------------------

-   Proactively searching for threats to achieve early identification and isolation, thereby minimizing the impact on the Company’s assets, products