Cybersecurity and Sustainability at NCC Group

Peter Kemp

Welcome to The Annual Report Podcast brought to you by Flint Digital. This podcast has been created using artificial intelligence. Its purpose is to give you, the listener, an additional way of understanding key themes within company reports. My name is Peter Kemp and I'm joined as always by my co-host Louisa Lally. Today we're going to be discussing NCC Group Plc's 2024 Sustainability Report which is available to download at N C C Group Plc dot com ....... So ....... NCC ...... big player in the tech world, right? But here’s what caught my attention—they’re not just about cybersecurity, resilience etc. This company is knee-deep in sustainability. Louisa, how’s that even a thing in a field like, well, cyber security?

Louisa Lally

It’s fascinating, isn't it? NCC Group essentially runs two businesses under one roof—Cyber Security and their Escode software escrow service. But what’s impressive is how embedded ESG principles are in everything they do. They don’t see sustainability as separate; it’s woven into their operations.

Peter Kemp

Right, like they’re walking the talk. I mean, slashing 40% of their office space? That’s not your usual corporate move.

Louisa Lally

Exactly. They’ve streamlined everything, and it’s intentional. The goal was to reduce their environmental impact while also adapting to hybrid work trends. That’s a win-win scenario—less square footage means fewer emissions and lower costs.

Peter Kemp

Okay, but office space—straightforward. What about travel? A global company can’t just stop hopping on planes, right?

Louisa Lally

Good question. NCC tackled that with a new travel policy, focusing on reducing emissions wherever possible. For instance, they’ve shifted towards rail travel instead of short-haul flights in the UK and Europe. And when flying is unavoidable, they’re using a new travel provider to track and manage emissions better.

Peter Kemp

Wow, it sounds, well, thorough. But here’s what I’m wondering—how do they manage all this while still, you know, growing the business?

Louisa Lally

That’s where their partnership with Positive Planet comes in. They’re working on mapping out a clear net zero strategy. It’s not just about offsetting emissions; it’s about creating a balance that allows the company to thrive sustainably while meeting regulatory and stakeholder expectations.

Peter Kemp

Right, so they’re not just saying, “Hey, we’ll get around to it.” They’re legitimally working behind the scenes.

Louisa Lally

Absolutely. It’s about making true progress. But let’s not forget, global tech companies do face challenges here. Aligning sustainability with business goals isn’t easy. Regulations are evolving, and operational pressures are always present.

Peter Kemp

Yeah, yeah. I I bet scaling down while staying competitive feels kinda like juggling flaming swords, huh?

Louisa Lally

A little, yes. But this is where NCC’s commitment stands out. By embedding ESG right into the DNA of their business model, they’re not just adapting; they’re leading by example.

Peter Kemp

So, all this talk about sustainability is impressive, but what really stood out to me about NCC is their focus on people. I mean, they’re not just about protecting the digital world—they’re also incredibly intentional about supporting the humans behind it all.

Louisa Lally

Absolutely. NCC’s approach is all about building up their workforce, not just as employees but as individuals. They’ve rolled out a suite of family-friendly policies that covers everything from fertility treatments to cancer care. And those policies? They’re available from day one—no waiting period.

Peter Kemp

Hang on, they’ve got policies for pet care too?

Louisa Lally

Yes, even pet care. It’s about creating an environment where colleagues feel supported, no matter their life stage or challenges. That goes a long way in fostering loyalty and inclusivity.

Peter Kemp

Okay, so they’re not just talking the talk, they’re actually, uh, walking the walk on inclusion?

Louisa Lally

Exactly. Their colleague resource groups are a testament to that. These groups—LGBTQIA+, Race and Ethnicity, Neurodiversity, and more—are essential for amplifying underrepresented voices. They’re not just for show; they help shape policies and ensure that the company is inclusive in practice, not just in theory.

Peter Kemp

Right. And I saw they’ve even set up new groups, like the Parents Network and this one called MenoPause... uh, and Connect?

Louisa Lally

That’s correct. MenoPause and Connect is focused on supporting colleagues on everything related to menopause. It’s one of those things that tends to get overlooked in corporate settings, but NCC recognises that holistic wellbeing matters. And then there’s their emphasis on well being during challenging events.

Peter Kemp

Go on.

Louisa Lally

During a series of typhoons in the Philippines, NCC made sure their colleagues had everything they needed, from basic safety to emotional support. They coordinated globally to ensure their people could weather the storm—literally and figuratively.

Peter Kemp

That's impressive. I mean, that’s serious dedication. But, like, how does all this people focus tie back into their core business? They’re a cybersecurity company after all.

Louisa Lally

Great question. It’s simple—resilience starts with people. When employees feel valued and supported, they’re more engaged, more innovative, and ultimately better equipped to solve complex challenges. That engagement trickles down to clients, creating a ripple effect of, well, resilience.

Peter Kemp

Okay, I I like that. Resilience isn’t just about systems or, you know, firewalls—it’s about the people running them.

Louisa Lally

Exactly, PK. They’re building a stronger organisation and, at the same time, setting an example for the industry. It’s about more than just survival—it’s about thriving.

Peter Kemp

You know, Louisa, something about all this talk of resilience got me thinking—if resilience starts with people, how does NCC carry that same principle over to their work on sustainable solutions in cybersecurity? I mean, eco-friendly tech in this field must be a whole other challenge, right?

Louisa Lally

It’s all about embedding sustainability into their DNA. NCC leverages three pillars—insight, innovation, and intelligence. These aren’t just buzzwords; they guide everything, from developing less energy-intensive AI to creating software escrow solutions that help clients meet their own sustainability objectives.

Peter Kemp

Hmm, yeah, but making AI less power-hungry—what does that even look like in practice?

Louisa Lally

Great question. AI’s carbon footprint is a growing concern, but NCC addresses it by pushing for more efficient models, using renewable energy, and minimizing unnecessary processes. They’re also deeply involved in aligning to science-based targets with organizations like Positive Planet to ensure their carbon reduction plan isn't just performative but actionable.

Peter Kemp

Right, they’re not just winging it. But you know, Louisa, certifications always confuse me. We hear about ISO this, CREST that. Are they really that important?

Louisa Lally

Absolutely. Certifications like ISO 27001 aren’t just feel-good badges—they’re a mark of rigorous governance and high-quality standards. NCC takes this seriously, using these frameworks to benchmark their operations and improve constantly.

Peter Kemp

Wow, that’s, uh, thorough. But it feels like a lot, doesn’t it? Are they biting off more than they can chew here?

Louisa Lally

Well, it’s definitely ambitious, but that’s why they focus on collaboration. Whether it’s working with government policymakers or sharing intelligence across sectors, they’re building a cyber ecosystem that’s resilient, secure, and sustainable. It’s, you know, a big-picture approach.

Peter Kemp

Okay, okay, I’m sold. It’s like they’re showing other companies that you can grow while, you know, actually helping the planet.

Louisa Lally

Exactly. And that’s what makes NCC stand out. They’re not just a cybersecurity firm; they’re shaping the future of what responsible business can look like in the digital age.

Peter Kemp

Well, I I think that’s a wrap on NCC Group’s sustainability journey—for now, at least. Louisa, any final thoughts to leave our listeners with?

Louisa Lally

Just this: the work NCC is doing shows that sustainability and innovation are not mutually exclusive. They go hand in hand, creating solutions that don’t just meet today’s challenges but prepare us for the future.

Peter Kemp

And on that note, thanks for listening to this podcast brought to you by Flint Digital. It’s been a pleasure breaking this down with you, Louisa.

Louisa Lally

Always fun, PK. And to our listeners—thank you from me too.