Company: KYIV
Filing Date: 2025-09-05
Form Type: F-1
Source: 0001213900-25-085122
Chunk: 177

Company: Kyivstar Group Ltd.
Filing Date: 2025-09-05
Form: F-1
Chunk 177
---
 guest roaming and roaming revenue, due to a decline in guest roaming and an increase in emigration. 105 Information Technology and Cybersecurity We have revised our cybersecurity policy landscape to properly reflect our ambition to remain an information security certified company by enhancing all of our cybersecurity standards to provide tactical cybersecurity guidance in accordance with ISO 27001 (Information Security Management System) and certain process handbooks (especially access control and information security incident management handbooks) at the operational level. In July 2024, we renewed our ISO/IEC 27001 certification by successfully passing the surveillance audit, and we plan to pass the ISO/IEC 27001 re -certificationaudit in 2025. In December 2024, an independent external service provider conducted penetration testing on our systems to assess the current cybersecurity levels and proactively detect possible weaknesses in different systems. Cyber-Attack in December 2023 On December 12, 2023, we announced that our network had been the target of a widespread external cyber -attackcausing a technical failure. This resulted in a temporary disruption of our network and services, interrupting the provision of voice and data connectivity on mobile and fixed networks, international roaming, and SMS services, among others, for our customers in Ukraine and abroad. Our technical teams, working in collaboration with Ukrainian law enforcement and government agencies and the Security Service of Ukraine (“SSU”), restored services in multiple stages, starting with voice and data connectivity. On December 19, 2023, we announced that we had restored services in all categories of our communication services, and that mobile voice and internet, fixed connectivity and SMS services as well as the MyKyivstar self -careapplication were active and available. After stabilizing the network, although there was no legal obligation to do so, we immediately launched offers to thank our customers for their loyalty, initiating a “customer appreciation” program offering a discount for one month of services on certain types of contracts. Despite the limited period during which the critical services were down, we experienced service disruptions and costs associated with additional IT capabilities required for restoring services, replacing lost equipment or compensating external consultants and partners for the year ended December 31, 2023. The incident had a significant impact on our combined revenue for the years ended December 31, 2023 and 2024, primarily due to the costs related to the implementation of our “customer appreciation” program. We estimate that the impact of these offers on operating revenue for the years ended December 31, 2023 and