Protecting data and systems

Protecting our organisation, our customers, and our intellectual property is part of how we work. We take a proactive approach to keeping our data secure, reliable, and available.

Our approach is guided by business needs and aligned with global regulations and industry standards. It is based on understanding and managing risks in a structured and responsible way.

We continuously work to strengthen controls and improve how we work. Security is built-in to the design from the start – across our own operations and in the way we develop products and solutions.

We follow leading frameworks and standards [GL1] such as NIST, OWASP, and ISA/IEC, and work closely with partners and customers to meet shared requirements. Our policies and practices are regularly reviewed to keep pace with evolving threats and expectations.

How we manage information security

Cybersecurity is part of everyday work across Tetra Pak. It’s a continuous effort, combining people, processes, and technology.

We assess risks, monitor for threats, and act to quickly remedy [GL2] vulnerabilities. Our employees and consultants complete ongoing security training [GL3] to help protect systems and data in their daily work.

Access to systems is controlled and regularly reviewed, and our environments are continuously tested and strengthened. We work closely with suppliers and partners to ensure consistent security standards.

Clear processes and controls – such as access management, encryption, and secure backups – help protect both our data and our customers’ data.

This is how we manage and protect our organisation, our customers, and our intellectual property, in close collaboration with partners, suppliers, and customers.