2025 Sustainability Report / Our Sustainability Agenda / Digital innovation and cybersecurity

Digital innovation and cybersecurity

CLP is prioritising digital innovation to improve operations and provide smarter energy services while strengthening cyber resilience. It is continuously enhancing its digital capabilities to become a data-driven and secure utility. Digitalisation is crucial for transforming the energy sector. Continued investment in digital capability, governance and training, and responsible consumer data analytics and use of emerging technologies such as Artificial Intelligence (AI), enables CLP to create a more efficient, resilient, connected and customer-centric business.

Launched VoltAI, CLP’s internal AI platform, which enables over 2,500 employees to drive digital innovation by experimenting with secure, enterprise-grade AI tools

agenda-digital-innovation-and-cyber-security-2025_1

Enhanced cybersecurity resilience by implementing Security Orchestration, Automation, and Response (SOAR) capabilities and updating Group-wide policies to meet new regulatory
requirements

agenda-digital-innovation-and-cyber-security-2025_2a

In 2025, CLP successfully deployed 39 use cases of innovative technologies including AI and data products across the Group against a target of 28

agenda-digital-innovation-and-cyber-security-2025-3

CLP is investing in AI and smart grid solutions that enable real-time monitoring and demand response. These advancements are enhancing CLP’s operational efficiency, supporting world-class reliability, strengthening network resilience and improving energy affordability for customers.

CLP has established a comprehensive group-level AI Policy and a robust risk management framework to support responsible innovation. The CLP AI Policy outlines clear requirements for the ethical and secure use of AI and is supported by an AI Governance Framework that defines accountability, escalation, and reporting structures across the organisation. Every AI initiative is required to undergo a formal impact assessment before deployment, evaluating aspects such as ethical use, data privacy, and human oversight.

Cybersecurity remains a core priority. Advanced cybersecurity measures include SOAR capabilities, along with a Security-by-Design approach embedded in project lifecycles. CLP regularly updates its cybersecurity standards to reflect technological advances and regulatory changes. The Group Security team provides in-house expertise, conducts regular risk assessments, and ensures compliance with international frameworks. These integrated policies and controls are not only safeguarding CLP’s assets and data, but also fostering stakeholder trust and enabling the company to innovate confidently as it advances its digital transformation.

Why is this topic material to stakeholders?

By investing in cybersecurity, CLP is protecting its infrastructure and its customer data, which is essential for maintaining trust and reputation for reliability among consumers and regulators. Through the integration of AI and digital technologies, CLP is enhancing its grid efficiency and empowering customers by offering improved energy management tools, providing greater control over energy use as well as cost savings. Investments in smart grid infrastructure and energy storage are providing scalable solutions that can accommodate emerging technologies and support the integration of renewable energy sources, benefiting both the environment and customers. Alongside these advances, CLP is carefully managing their potential to cause job displacements or skill gaps.

Customers