An ongoing management issue involving cyberattacks and information security threats, managed through group-wide detection and response by the CISO and specialist departments, security-by-design for products, and engagement with suppliers. It includes multiple potential business impacts, such as business interruption, customer production-line stoppages, and disruption to core head-office operations.