Company: RTNTF
Filing Date: 2025-02-20
Form Type: 20-F
Source: 0001628280-25-006642
Chunk: 501

Company: RIO TINTO LTD
Filing Date: 2025-02-20
Form: 20-F
Chunk 501
---
) who is accountable

to the Chief Financial Officer. Additional

oversight is provided by the CSSC.

Our CISO leads a management team that

oversees delivery of the capabilities listed in

the table on the previous page.

The CSSC is our primary governing body for

operational management, responsible for

cyber security and the oversight of Group-wide

cyber security, reporting regularly to the

Executive Committee. The objective of the

CSSC is to ensure proper steps are taken to

proactively manage cyber security risk and

protect our most valuable information assets,

process control systems and users.

The CSSC also helps drive appropriate

behaviours, and ensures high-priority initiatives

receive executive support across the Group.

In the event of a cyber security incident, our

Cyber Incident Response team takes action

to contain, analyse and remediate the

incident. Impact thresholds trigger

disclosures to governance bodies, including

the CSSC and the Disclosure Committee,

who may consult with external legal counsel.

See “Disclosure Committee” on page 101 .

The following table lists the members of the

CSSC as well as their relevant experience.

| Name               | Title                                                                            | Relevant experience                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| Peter Cunningham   | Chief Financial Officer                                                          | Peter joined Rio Tinto in March 1993 and was appointed Chief Financial Officerand Executive Director in June 2021. As Chair of the Cyber Security SteeringCommittee, he has presided over regular cyber security threat intelligencebriefings, the active monitoring of key cyber risks, and progress of our cybersecurity improvement and assurance initiatives since assuming the duties of theChair of the CSSC in 2021. With his leadership of our IT, Group Risk and GroupInternal Audit functions, he maintains strong oversight of our broader riskmanagement processes and internal controls. |
| Daniel Evans       | Chief Information Officer                                                        | Daniel has 13 years' cyber security leadership experience in senior, cyberintelligence and operational leadership roles.                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Scott Brown        | Chief Information Security Officer                                               | Scott has more than 15 years' cyber security experience in both senior leadershipand operational roles.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| Isabelle Deschamps | Chief Legal Officer, Governance andCorporate Affairs                             | Isabelle, Mark, Alex and Richard bring operational and business risk expertise thatis relevant to cyber security and their respective roles on the CSSC.                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Mark Davies        | Chief Technical Officer                                                          |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| Alex Mark