Driving Governance & Risk

Safeguarding what matters most

We operate in a complex and fast-evolving digital environment, with increasing risks to our business and stakeholders. By embedding data privacy, cyber security and ethical practices at the core of how we operate, we uphold trust in Axiata as a responsible digital organisation while driving innovation and enhancing our long-term value creation potential.

2025 highlights

Achieved a 99.9% completion rate for Group-wide Cyber Security and Data Privacy training

Attained Level 3 out of 5 data privacy maturity under the #ASH3.0 roadmap

Fully operationalised Zero Trust Architecture, contributing to a 3.52/5.0 cyber security maturity score

Introduced our AI Security Governance Framework to strengthen oversight of emerging technologies

Our Governance Journey

We have taken an active approach to governance since our founding, enabling us to mitigate against emerging risks in the evolving digital landscape our uphold our standing as a responsible and trustworthy organisation.

2009

Launching our group code of conduct

2012

Integrating ESG and governance

Embedded Environmental, Social and Governance (ESG) considerations in our governance
Adopted our Board Charter

2016

Strengthening our approach

Our corporate governance standards are recognised by the Minority Shareholder Watchdog Group (MSWG).
Established the Cyber Security Steering Committee (CSSC) to accelerate Group-wide cybersecurity.

2019

Bolstering Our Commitment To Transparency And Accountability

Adopted the Group Whistleblowing Policy
Expanded the remit of our Board Risk Committee

2020

Established Group-wide Best Practices

Appointed our first Group Chief Risk & Compliance Officer (GCRCO)
Adopted Group-wide No Gift and Anti-Bribery and Anti-Corruption (ABAC) policies

2021

Levelling Up Our Governance

Revised our Code of Conduct
Began the execution of the Digital Trust & Resilience 2023 (DT&R2023) cyber security strategy

2022

Taking Governance Further

Launched the Axiata Cyber Fusion Centre under DT&R to advocate cyber resilience
Renewed the Corruption Free Pledge with the Malaysian Anti-Corruption Commission

2023

Attaining Global Standards

Our Cyber Fusion Centre received the Cyber Security Project of the Year award at the Malaysia Cybersecurity Awards 2023
The centre's operational standards are accredited with the CREST Certification, making it a FIRST Member

2023

Attaining Global Standards

Red Team members secured second place in the Cyber Nations Championship, highlighting the global competitiveness and talent of our team

2024

Further Securing Our Core

Introduced Zero Trust Architecture across key assets and functions
Expanded coverage and uptake of training on anti-bribery and anti-corruption, whistleblowing, data privacy and cybersecurity across our workforce

2025

Securing Our Future

Successfully deployed the HELIOS AI-powered threat attribution platform, enhancing our ability to identify and respond to emerging threats quickly
Introduced our AI Security Governance Framework, creating a solid basis to leverage AI and other emerging technologies effectively and ethically

2025

Securing Our Future