Industry Comparison
Select Language
Current language: English (2023)
You are viewing information about the following Industries:
-
Internet Media & Services
The Internet Media & Services industry consists of two main segments. Entities in the Internet Media segment provide search engines and internet advertising channels, online gaming, and online communities such as social networks, as well as content, which is usually easily searchable, such as educational, medical, health, sports or news content. Entities in the internet-based Services segment sell services mainly through the internet. The industry generates revenue primarily from online advertising, usually on free content, with other revenue sources being subscription fees, content sales or the sale of user information to third parties. -
Security & Commodity Exchanges
Security and commodity exchanges operate marketplaces in the form of physical trading floors or electronic platforms for trading financial securities, commodities, or other financial instruments. Entities in the industry primarily generate revenue from fees on trades and for clearing transactions as well as listing fees. Competition for fees continues to increase with the advent of alternative trading platforms that offer less expensive trades and provide listing services. Recent trends in the regulatory environment suggest a greater focus on transparency, risk management, and market stability. As new policies and market transformations encourage more responsible management of social capital and strong governance, firms that can address all forms of capital—not just financial—will be better positioned to protect shareholder value in the future.
Relevant Issues for both Industries (8 of 26)
Why are some issues greyed out?
The SASB Standards vary by industry based on the different sustainability-related risks and opportunities within an industry. The issues in grey were not identified during the standard-setting process as the most likely to be useful to investors, so they are not included in the Standard. Over time, as the ISSB continues to receive market feedback, some issues may be added or removed from the Standard. Each company determines which sustainability-related risks and opportunities are relevant to its business. The Standard is designed for the typical company in an industry, but individual companies may choose to report on different sustainability-related risks and opportunities based on their unique business model.-
Environment
- GHG Emissions
- Air Quality
-
Energy Management
The category addresses environmental impacts associated with energy consumption. It addresses the company’s management of energy in manufacturing and/or for provision of products and services derived from utility providers (grid energy) not owned or controlled by the company. More specifically, it includes management of energy efficiency and intensity, energy mix, as well as grid reliance. Upstream (e.g., suppliers) and downstream (e.g., product use) energy use is not included in the scope. - Water & Wastewater Management
- Waste & Hazardous Materials Management
- Ecological Impacts
-
Social Capital
- Human Rights & Community Relations
-
Customer Privacy
The category addresses management of risks related to the use of personally identifiable information (PII) and other customer or user data for secondary purposes including but not limited to marketing through affiliates and non-affiliates. The scope of the category includes social issues that may arise from a company’s approach to collecting data, obtaining consent (e.g., opt-in policies), managing user and customer expectations regarding how their data is used, and managing evolving regulation. It excludes social issues arising from cybersecurity risks, which are covered in a separate category. -
Data Security
The category addresses management of risks related to collection, retention, and use of sensitive, confidential, and/or proprietary customer or user data. It includes social issues that may arise from incidents such as data breaches in which personally identifiable information (PII) and other user or customer data may be exposed. It addresses a company’s strategy, policies, and practices related to IT infrastructure, staff training, record keeping, cooperation with law enforcement, and other mechanisms used to ensure security of customer or user data. - Access & Affordability
- Product Quality & Safety
- Customer Welfare
- Selling Practices & Product Labeling
-
Human Capital
- Labour Practices
- Employee Health & Safety
-
Employee Engagement, Diversity & Inclusion
The category addresses a company’s ability to ensure that its culture and hiring and promotion practices embrace the building of a diverse and inclusive workforce that reflects the makeup of local talent pools and its customer base. It addresses the issues of discriminatory practices on the bases of race, gender, ethnicity, religion, sexual orientation, and other factors.
-
Business Model and Innovation
-
Product Design & Lifecycle Management
The category addresses incorporation of environmental, social, and governance (ESG) considerations in characteristics of products and services provided or sold by the company. It includes, but is not limited to, managing the lifecycle impacts of products and services, such as those related to packaging, distribution, use-phase resource intensity, and other environmental and social externalities that may occur during their use-phase or at the end of life. The category captures a company’s ability to address customer and societal demand for more sustainable products and services as well as to meet evolving environmental and social regulation. It does not address direct environmental or social impacts of the company’s operations nor does it address health and safety risks to consumers from product use, which are covered in other categories. - Business Model Resilience
- Supply Chain Management
- Materials Sourcing & Efficiency
- Physical Impacts of Climate Change
-
-
Leadership and Governance
-
Business Ethics
The category addresses the company’s approach to managing risks and opportunities surrounding ethical conduct of business, including fraud, corruption, bribery and facilitation payments, fiduciary responsibilities, and other behaviour that may have an ethical component. This includes sensitivity to business norms and standards as they shift over time, jurisdiction, and culture. It addresses the company’s ability to provide services that satisfy the highest professional and ethical standards of the industry, which means to avoid conflicts of interest, misrepresentation, bias, and negligence through training employees adequately and implementing policies and procedures to ensure employees provide services free from bias and error. -
Competitive Behaviour
The category covers social issues associated with existence of monopolies, which may include, but are not limited to, excessive prices, poor quality of service, and inefficiencies. It addresses a company’s management of legal and social expectation around monopolistic and anti-competitive practices, including issues related to bargaining power, collusion, price fixing or manipulation, and protection of patents and intellectual property (IP). - Management of the Legal & Regulatory Environment
- Critical Incident Risk Management
-
Systemic Risk Management
The category addresses the company’s contributions to or management of systemic risks resulting from large-scale weakening or collapse of systems upon which the economy and society depend. This includes financial systems, natural resource systems, and technological systems. It addresses the mechanisms a company has in place to reduce its contributions to systemic risks and to improve safeguards that may mitigate the impacts of systemic failure. For financial institutions, the category also captures the company’s ability to absorb shocks arising from financial and economic stress and meet stricter regulatory requirements related to the complexity and interconnectedness of companies in the industry.
-
Disclosure Topics
What is the relationship between General Issue Category and Disclosure Topics?
The General Issue Category is an industry-agnostic version of the Disclosure Topics that appear in each SASB Standard. Disclosure topics represent the industry-specific impacts of General Issue Categories. The industry-specific Disclosure Topics ensure each SASB Standard is tailored to the industry, while the General Issue Categories enable comparability across industries. For example, Health & Nutrition is a disclosure topic in the Non-Alcoholic Beverages industry, representing an industry-specific measure of the general issue of Customer Welfare. The issue of Customer Welfare, however, manifests as the Counterfeit Drugs disclosure topic in the Biotechnology & Pharmaceuticals industry.-
Access Standard
-
Energy Management
The category addresses environmental impacts associated with energy consumption. It addresses the company’s management of energy in manufacturing and/or for provision of products and services derived from utility providers (grid energy) not owned or controlled by the company. More specifically, it includes management of energy efficiency and intensity, energy mix, as well as grid reliance. Upstream (e.g., suppliers) and downstream (e.g., product use) energy use is not included in the scope.-
Environmental Footprint of Hardware Infrastructure
With the Internet & Media Services industry providing a growing amount of content and service offerings, entities in this industry increasingly own, operate or rent more data centres and other hardware. Thus, managing the energy and water use associated with IT hardware infrastructure is relevant to value creation. Data centres must be powered continuously. Energy supply disruptions may have a material impact on operations depending on the disruption magnitude and timing. Entities face a trade-off between energy and water consumption because of data centre cooling needs. Cooling data centres with water instead of chillers improves energy efficiency, but this method may create dependence on significant local water resources. Data centre specification decisions are important for managing costs, obtaining a reliable energy and water supply, and reducing reputational risks, particularly with the increasing global regulatory focus on climate change and the opportunities arising from energy efficiency and renewable energy innovations.
-
-
Customer Privacy
The category addresses management of risks related to the use of personally identifiable information (PII) and other customer or user data for secondary purposes including but not limited to marketing through affiliates and non-affiliates. The scope of the category includes social issues that may arise from a company’s approach to collecting data, obtaining consent (e.g., opt-in policies), managing user and customer expectations regarding how their data is used, and managing evolving regulation. It excludes social issues arising from cybersecurity risks, which are covered in a separate category.-
Data Privacy, Advertising Standards & Freedom of Expression
Entities in the Internet & Media Services industry rely on customer data to innovate new tools and services, generate revenues through advertising sales, and track and prevent criminal behaviour, such as hacking and online predators targeting children. However, the use and storage of a wide range of customer data, such as personal, demographic, content and behavioural data, raises privacy concerns, resulting in increased regulatory scrutiny in many countries. Entities face reputational risks from providing access to user data to governments, which may raise concerns that governments may use the data to limit citizens’ freedoms. Entities may also face increased costs of compliance associated with the varying local laws or government demands related to censorship of culturally or politically sensitive material on websites. This issue may affect entity profitability through the loss of users and may influence entity decisions to enter, operate in, or exit specific markets.
-
-
Data Security
The category addresses management of risks related to collection, retention, and use of sensitive, confidential, and/or proprietary customer or user data. It includes social issues that may arise from incidents such as data breaches in which personally identifiable information (PII) and other user or customer data may be exposed. It addresses a company’s strategy, policies, and practices related to IT infrastructure, staff training, record keeping, cooperation with law enforcement, and other mechanisms used to ensure security of customer or user data.-
Data Security
Internet Media & Services entities are targets of growing data security threats from cyber-attacks, which may put customer information and an entity’s own data at risk. Inadequate data security threat prevention, detection and remediation may influence customer acquisition and retention and result in decreased market share or lower demand for the entity’s products or services. By identifying and addressing data security threats in a timely manner, entities may protect brand value and improve customer acquisition and retention. Furthermore, effective management may avoid significant expenses associated with data breaches, which are most commonly directed at recapturing users following a breach.
-
-
Employee Engagement, Diversity & Inclusion
The category addresses a company’s ability to ensure that its culture and hiring and promotion practices embrace the building of a diverse and inclusive workforce that reflects the makeup of local talent pools and its customer base. It addresses the issues of discriminatory practices on the bases of race, gender, ethnicity, religion, sexual orientation, and other factors.-
Employee Recruitment, Inclusion & Performance
Employees are important contributors to value creation in the Internet Media & Services industry. Recruiting qualified employees to fill these positions may be difficult. A shortage of technically skilled employees can create intense competition to acquire highly skilled employees globally, contributing to high employee turnover rates. Entities offer significant monetary and non-monetary benefits to improve employee engagement, retention and productivity. Initiatives to improve employee engagement and work-life balance might influence the recruitment and retention of a diverse workforce. Efforts to recruit and develop globally diverse talent pools may mitigate the talent shortage and improve the value of entity offerings. Greater workforce diversity is important for innovation, and it helps entities understand the needs of a diverse and global customer base.
-
-
Product Design & Lifecycle Management
The category addresses incorporation of environmental, social, and governance (ESG) considerations in characteristics of products and services provided or sold by the company. It includes, but is not limited to, managing the lifecycle impacts of products and services, such as those related to packaging, distribution, use-phase resource intensity, and other environmental and social externalities that may occur during their use-phase or at the end of life. The category captures a company’s ability to address customer and societal demand for more sustainable products and services as well as to meet evolving environmental and social regulation. It does not address direct environmental or social impacts of the company’s operations nor does it address health and safety risks to consumers from product use, which are covered in other categories.None -
Business Ethics
The category addresses the company’s approach to managing risks and opportunities surrounding ethical conduct of business, including fraud, corruption, bribery and facilitation payments, fiduciary responsibilities, and other behaviour that may have an ethical component. This includes sensitivity to business norms and standards as they shift over time, jurisdiction, and culture. It addresses the company’s ability to provide services that satisfy the highest professional and ethical standards of the industry, which means to avoid conflicts of interest, misrepresentation, bias, and negligence through training employees adequately and implementing policies and procedures to ensure employees provide services free from bias and error.None -
Competitive Behaviour
The category covers social issues associated with existence of monopolies, which may include, but are not limited to, excessive prices, poor quality of service, and inefficiencies. It addresses a company’s management of legal and social expectation around monopolistic and anti-competitive practices, including issues related to bargaining power, collusion, price fixing or manipulation, and protection of patents and intellectual property (IP).-
Intellectual Property Protection & Competitive Behaviour
Despite the openness of the Internet, entities in the Internet Media & Services industry spend a significant proportion of revenue on intellectual property (IP) protection, including acquiring patents and copyrights. Although IP protection is inherent to some entity business models and an important driver of innovation, entity IP practices may be a contentious social issue. Entities sometimes may acquire patents and other IP protection to restrict competition and innovation, particularly if they are dominant market players. Because of software complexity, its abstract nature, and increasing IP rights protection related to software, Internet Media & Services entities must navigate overlapping patent claims. As a result, entities in the industry with alleged patent violations may be subject to frequent litigation or increased regulatory scrutiny. Adverse legal or regulatory rulings related to antitrust and IP may expose Internet Media & Services entities to costly and lengthy litigations and potential monetary losses as a result. Such rulings also may affect an entity’s market share and pricing power if its patents or dominant position in important markets are challenged legally, with significant financial consequences. Therefore, entities that balance IP protection and its use to spur innovation while ensuring their IP management and other business practices do not unfairly restrict competition may reduce regulatory scrutiny and legal actions while protecting market value.
-
-
Systemic Risk Management
The category addresses the company’s contributions to or management of systemic risks resulting from large-scale weakening or collapse of systems upon which the economy and society depend. This includes financial systems, natural resource systems, and technological systems. It addresses the mechanisms a company has in place to reduce its contributions to systemic risks and to improve safeguards that may mitigate the impacts of systemic failure. For financial institutions, the category also captures the company’s ability to absorb shocks arising from financial and economic stress and meet stricter regulatory requirements related to the complexity and interconnectedness of companies in the industry.None
-
-
Access Standard
-
Energy Management
The category addresses environmental impacts associated with energy consumption. It addresses the company’s management of energy in manufacturing and/or for provision of products and services derived from utility providers (grid energy) not owned or controlled by the company. More specifically, it includes management of energy efficiency and intensity, energy mix, as well as grid reliance. Upstream (e.g., suppliers) and downstream (e.g., product use) energy use is not included in the scope.None -
Customer Privacy
The category addresses management of risks related to the use of personally identifiable information (PII) and other customer or user data for secondary purposes including but not limited to marketing through affiliates and non-affiliates. The scope of the category includes social issues that may arise from a company’s approach to collecting data, obtaining consent (e.g., opt-in policies), managing user and customer expectations regarding how their data is used, and managing evolving regulation. It excludes social issues arising from cybersecurity risks, which are covered in a separate category.None -
Data Security
The category addresses management of risks related to collection, retention, and use of sensitive, confidential, and/or proprietary customer or user data. It includes social issues that may arise from incidents such as data breaches in which personally identifiable information (PII) and other user or customer data may be exposed. It addresses a company’s strategy, policies, and practices related to IT infrastructure, staff training, record keeping, cooperation with law enforcement, and other mechanisms used to ensure security of customer or user data.None -
Employee Engagement, Diversity & Inclusion
The category addresses a company’s ability to ensure that its culture and hiring and promotion practices embrace the building of a diverse and inclusive workforce that reflects the makeup of local talent pools and its customer base. It addresses the issues of discriminatory practices on the bases of race, gender, ethnicity, religion, sexual orientation, and other factors.None -
Product Design & Lifecycle Management
The category addresses incorporation of environmental, social, and governance (ESG) considerations in characteristics of products and services provided or sold by the company. It includes, but is not limited to, managing the lifecycle impacts of products and services, such as those related to packaging, distribution, use-phase resource intensity, and other environmental and social externalities that may occur during their use-phase or at the end of life. The category captures a company’s ability to address customer and societal demand for more sustainable products and services as well as to meet evolving environmental and social regulation. It does not address direct environmental or social impacts of the company’s operations nor does it address health and safety risks to consumers from product use, which are covered in other categories.-
Promoting Transparent & Efficient Capital Markets
Security and commodity exchanges have a responsibility to ensure equal access to capital markets for all investors. As public markets, these entities help ensure efficient capital allocation and equal application of rules for all participants. Entities must also manage the release of public data to prevent information asymmetries. The advent of new technologies such as high-frequency trading may give some traders an advantage at the expense of others. Information asymmetries allowing for unfair arbitrage may result in litigation, regulatory penalties, additional regulatory oversight and increased compliance costs, as well as reputational damage that may reduce trading volumes and associated revenues. Disclosure of policies relating to information releases, trading halts and the risks and opportunities associated with algorithmic or high-frequency trading may permit investors to understand more clearly how security and commodity exchanges protect shareholder value.
-
-
Business Ethics
The category addresses the company’s approach to managing risks and opportunities surrounding ethical conduct of business, including fraud, corruption, bribery and facilitation payments, fiduciary responsibilities, and other behaviour that may have an ethical component. This includes sensitivity to business norms and standards as they shift over time, jurisdiction, and culture. It addresses the company’s ability to provide services that satisfy the highest professional and ethical standards of the industry, which means to avoid conflicts of interest, misrepresentation, bias, and negligence through training employees adequately and implementing policies and procedures to ensure employees provide services free from bias and error.-
Managing Conflicts of Interest
Security and commodity exchanges are responsible for the oversight of member entities. Specifically, entities in this industry monitor membership information and regulatory compliance to ensure market integrity and transparency. Controversies relating to market manipulation, tax fraud, investor protection rules and anti-competitive behaviour have raised concern about conflicts of interest that arise because of security and commodity exchanges’ position as self-regulatory organisations (SROs). Rapid innovation in financial markets provides significant opportunities to enhance profitability. However, exchanges must continue to fulfil their responsibilities as SROs to ensure open and fair access to all investors, to publish rules and fees, and to oversee trading. Entities that effectively discourage fraudulent or unethical activities may preserve market integrity, limit reputational damage and ensure long-term sustainable growth.
-
-
Competitive Behaviour
The category covers social issues associated with existence of monopolies, which may include, but are not limited to, excessive prices, poor quality of service, and inefficiencies. It addresses a company’s management of legal and social expectation around monopolistic and anti-competitive practices, including issues related to bargaining power, collusion, price fixing or manipulation, and protection of patents and intellectual property (IP).None -
Systemic Risk Management
The category addresses the company’s contributions to or management of systemic risks resulting from large-scale weakening or collapse of systems upon which the economy and society depend. This includes financial systems, natural resource systems, and technological systems. It addresses the mechanisms a company has in place to reduce its contributions to systemic risks and to improve safeguards that may mitigate the impacts of systemic failure. For financial institutions, the category also captures the company’s ability to absorb shocks arising from financial and economic stress and meet stricter regulatory requirements related to the complexity and interconnectedness of companies in the industry.-
Managing Business Continuity & Technology Risks
Security and commodity exchanges face increased risks and opportunities associated with information technology. The industry’s integral position in the proper functioning of financial markets requires that exchanges manage security breaches and technology errors to prevent market disruptions. Because security and commodity exchanges face increased volumes of trading associated with the clearing and execution of derivative trades and increased frequency of cyber-attacks, the industry may be exposed to new risks and opportunities associated with its reliance on information technology. Failure to ensure trading continuity may erode customer trust and result in reduced trading volumes and loss of revenue. Increased disclosure of efforts taken to prevent these risks may allow shareholders to assess the entity’s value more accurately than they could otherwise.
-
-
General Issue Category
Remove
Internet Media & Services
Access Standard
Remove
Security & Commodity Exchanges
Access Standard
Energy Management
-
Environmental Footprint of Hardware Infrastructure
With the Internet & Media Services industry providing a growing amount of content and service offerings, entities in this industry increasingly own, operate or rent more data centres and other hardware. Thus, managing the energy and water use associated with IT hardware infrastructure is relevant to value creation. Data centres must be powered continuously. Energy supply disruptions may have a material impact on operations depending on the disruption magnitude and timing. Entities face a trade-off between energy and water consumption because of data centre cooling needs. Cooling data centres with water instead of chillers improves energy efficiency, but this method may create dependence on significant local water resources. Data centre specification decisions are important for managing costs, obtaining a reliable energy and water supply, and reducing reputational risks, particularly with the increasing global regulatory focus on climate change and the opportunities arising from energy efficiency and renewable energy innovations.
Customer Privacy
-
Data Privacy, Advertising Standards & Freedom of Expression
Entities in the Internet & Media Services industry rely on customer data to innovate new tools and services, generate revenues through advertising sales, and track and prevent criminal behaviour, such as hacking and online predators targeting children. However, the use and storage of a wide range of customer data, such as personal, demographic, content and behavioural data, raises privacy concerns, resulting in increased regulatory scrutiny in many countries. Entities face reputational risks from providing access to user data to governments, which may raise concerns that governments may use the data to limit citizens’ freedoms. Entities may also face increased costs of compliance associated with the varying local laws or government demands related to censorship of culturally or politically sensitive material on websites. This issue may affect entity profitability through the loss of users and may influence entity decisions to enter, operate in, or exit specific markets.
Data Security
-
Data Security
Internet Media & Services entities are targets of growing data security threats from cyber-attacks, which may put customer information and an entity’s own data at risk. Inadequate data security threat prevention, detection and remediation may influence customer acquisition and retention and result in decreased market share or lower demand for the entity’s products or services. By identifying and addressing data security threats in a timely manner, entities may protect brand value and improve customer acquisition and retention. Furthermore, effective management may avoid significant expenses associated with data breaches, which are most commonly directed at recapturing users following a breach.
Employee Engagement, Diversity & Inclusion
-
Employee Recruitment, Inclusion & Performance
Employees are important contributors to value creation in the Internet Media & Services industry. Recruiting qualified employees to fill these positions may be difficult. A shortage of technically skilled employees can create intense competition to acquire highly skilled employees globally, contributing to high employee turnover rates. Entities offer significant monetary and non-monetary benefits to improve employee engagement, retention and productivity. Initiatives to improve employee engagement and work-life balance might influence the recruitment and retention of a diverse workforce. Efforts to recruit and develop globally diverse talent pools may mitigate the talent shortage and improve the value of entity offerings. Greater workforce diversity is important for innovation, and it helps entities understand the needs of a diverse and global customer base.
Product Design & Lifecycle Management
-
Promoting Transparent & Efficient Capital Markets
Security and commodity exchanges have a responsibility to ensure equal access to capital markets for all investors. As public markets, these entities help ensure efficient capital allocation and equal application of rules for all participants. Entities must also manage the release of public data to prevent information asymmetries. The advent of new technologies such as high-frequency trading may give some traders an advantage at the expense of others. Information asymmetries allowing for unfair arbitrage may result in litigation, regulatory penalties, additional regulatory oversight and increased compliance costs, as well as reputational damage that may reduce trading volumes and associated revenues. Disclosure of policies relating to information releases, trading halts and the risks and opportunities associated with algorithmic or high-frequency trading may permit investors to understand more clearly how security and commodity exchanges protect shareholder value.
Business Ethics
-
Managing Conflicts of Interest
Security and commodity exchanges are responsible for the oversight of member entities. Specifically, entities in this industry monitor membership information and regulatory compliance to ensure market integrity and transparency. Controversies relating to market manipulation, tax fraud, investor protection rules and anti-competitive behaviour have raised concern about conflicts of interest that arise because of security and commodity exchanges’ position as self-regulatory organisations (SROs). Rapid innovation in financial markets provides significant opportunities to enhance profitability. However, exchanges must continue to fulfil their responsibilities as SROs to ensure open and fair access to all investors, to publish rules and fees, and to oversee trading. Entities that effectively discourage fraudulent or unethical activities may preserve market integrity, limit reputational damage and ensure long-term sustainable growth.
Competitive Behaviour
-
Intellectual Property Protection & Competitive Behaviour
Despite the openness of the Internet, entities in the Internet Media & Services industry spend a significant proportion of revenue on intellectual property (IP) protection, including acquiring patents and copyrights. Although IP protection is inherent to some entity business models and an important driver of innovation, entity IP practices may be a contentious social issue. Entities sometimes may acquire patents and other IP protection to restrict competition and innovation, particularly if they are dominant market players. Because of software complexity, its abstract nature, and increasing IP rights protection related to software, Internet Media & Services entities must navigate overlapping patent claims. As a result, entities in the industry with alleged patent violations may be subject to frequent litigation or increased regulatory scrutiny. Adverse legal or regulatory rulings related to antitrust and IP may expose Internet Media & Services entities to costly and lengthy litigations and potential monetary losses as a result. Such rulings also may affect an entity’s market share and pricing power if its patents or dominant position in important markets are challenged legally, with significant financial consequences. Therefore, entities that balance IP protection and its use to spur innovation while ensuring their IP management and other business practices do not unfairly restrict competition may reduce regulatory scrutiny and legal actions while protecting market value.
Systemic Risk Management
-
Managing Business Continuity & Technology Risks
Security and commodity exchanges face increased risks and opportunities associated with information technology. The industry’s integral position in the proper functioning of financial markets requires that exchanges manage security breaches and technology errors to prevent market disruptions. Because security and commodity exchanges face increased volumes of trading associated with the clearing and execution of derivative trades and increased frequency of cyber-attacks, the industry may be exposed to new risks and opportunities associated with its reliance on information technology. Failure to ensure trading continuity may erode customer trust and result in reduced trading volumes and loss of revenue. Increased disclosure of efforts taken to prevent these risks may allow shareholders to assess the entity’s value more accurately than they could otherwise.