Professional Integrity

The Administrative Board of GFT Technologies SE is responsible for corporate strategy and all major decisions, including fundamental sustainability issues. It considers appropriate consideration to environmental and social objectives, and systematically identifies and evaluates the impacts, risks and opportunities associated with social and environmental factors.

The Group CSR Committee is a Group-wide and cross-functional steering committee chaired by the CEO that supports and reports to the Administrative Board. It convenes three times a year to review progress on the CSR agenda at operating level and to discuss strategies to support the sustainability goals.

As a reliable provider of technology solutions, we understand our environmental accountability and its importance. We strive to increase our operational efficiency including energy consumption, raise the share of renewable energy, and adopt more sustainable procurement practices. The basis for environmental and climate protection is set out in our Group Environmental Policy, which is binding for all employees of all Group companies.

Digitalisation and the proliferation of key technologies such as generative AI and cloud create a new world of opportunity. But success depends on the uninterrupted availability of data, IT systems and networks. Cybersecurity risks are a constant threat for companies and other organisations. The aim of our cybersecurity & resilience strategy is to protect the company, its people, and its tangible and intangible assets, as well as ensuring business continuity.

Led by the Chief Information Security Officer (CISO), our information security management system (ISMS) ensures consistent security policies across all entities.  Certified to ISO/IEC 27001 for exemplary areas, our global ISMS is a guarantee of professional security management. Our German subsidiary is also TISAX certified for the automotive industry.

Operating in a distributed, network-oriented environment, GFT regularly assesses risks and implements mitigation countermeasures and resilience strategies, including ISO 27000 controls alignment, a hybrid operational model, zero trust network, and modern cloud-based desktops. Our Privacy and Security Steering Committee provides strategic direction, while the Security Operating Committee handles operational oversight.

All employees are responsible for data security and receive annual mandatory training. Our Security Operations Centre (GISOC) monitors systems 24/7, ensuring quick incident responses. GFT’s resilient business model includes distributed delivery processes, cloud-based applications, and a hybrid working model, ensuring business continuity and security.