Cybersecurity

Carlo Gavazzi Automation (hereinafter “the Company”) is a globally active organization specializing in the design, manufacturing, and marketing of electronic equipment for industrial and building automation. As a modern and forward-looking enterprise, the Company recognizes that ensuring the security and resilience of its operations is essential to delivering value to customers, partners, and stakeholders worldwide.

In an increasingly complex and interconnected digital environment, where cyber threats are growing in scale and sophistication, the protection of information through the preservation of its confidentiality, integrity, and availability is central to the Company’s strategy. This is especially relevant given the Company’s role as Important Entity under the NIS2 Directive.

To address these challenges and meet the expectations of regulators and clients, the Company has taken significant steps to strengthen its cybersecurity posture. Carlo Gavazzi has already achieved the IEC 62443-4-1 certification for its Operational Technology (OT) systems, demonstrating a high standard of industrial cybersecurity and it is now actively working towards an ISO/IEC 27001:2022 certification for its Information Technology (IT) systems, further reinforcing its commitment to a robust and holistic approach to information security.

To support this direction, the Company is committed to the following objectives:

• Ensure the confidentiality, integrity, and availability of information processed within the organization, supporting the secure delivery of its technologies and services;
• Protect the data and interests of customers, employees, third parties, and business partners;
• Build long-term, trust-based relationships with clients and stakeholders, positioning the Company as a reliable and secure market player;
• Proactively respond to the evolving cyber threat landscape, with particular focus on the prevention of data breaches and business disruptions;
• Optimize resource allocation and security investments based on risk assessments to minimize operational impacts;
• Comply with all applicable legal and regulatory requirements, including those set by the GDPR and the NIS2 Directive.

To achieve these goals, the Company has already implemented a comprehensive Information Security Management System (ISMS) aligned with the NIS2 requirements and inspired by the ISO/IEC 27001:2022 standard. This system is supported at the highest levels of the organization and is embedded across the Company’s R&D, Sourcing, and National Sales entities.

Our commitment to information security is not only a matter of compliance, but a key enabler of innovation, operational excellence, and long-term growth.