Innovation and Cyber-Resilience
Valeura continuously explores innovation and emerging technologies to enhance operational efficiency, safety, performance monitoring and emissions reduction. While these technologies create significant value, they also potentially introduce cybersecurity risks.
To manage both the opportunities and risks associated with digitalisation, Valeura has identified Cyber Resilience as a material topic supporting the long-term sustainability of its business.
Management Approach
Innovation and Digital Transformation
Valeura’s Digital Technology and Solutions (DTS) team centralises the management of digital technologies and innovation, supporting efficient coordination and resource optimisation. The Company’s Innovation and Digital Transformation Strategy focus on three key areas:
Valeura maintains a reliable digital infrastructure to support business continuity, including backup systems and disaster recovery planning. Strong information security controls protect critical assets and data, while disciplined budget monitoring ensures cost efficiency.
Valeura promotes cross-functional collaboration to develop innovative solutions that improve efficiency and resource use. In 2025, the Company launched a Continuous Improvement (CI) programme to strengthen a culture of innovation and operational excellence. The programme encourages employees to identify opportunities for cost savings, productivity improvements, revenue growth and technology integration.
A Project Register System allows employees to submit improvement proposals, with department managers reviewing and approving projects, including budget and resource requirements. A dedicated CI Representative Team supports implementation, manages a knowledge portal, facilitates knowledge-sharing sessions and publishes a monthly CI newsletter to encourage participation and the development of new initiatives.
Cyber-Resilience and Information Management
Valeura has established a cyber-resilience management system aligned with the Centre for Internet Security (CIS) Critical Security Controls framework, with quarterly reviews to remain aligned with evolving threats and updated standards.
The system includes policies, procedures and specialised services such as a Network Operations Centre (NOC), Cyber-Security Operations Centre (SOC) and a Cyber-Incident Response Plan. It proactively identifies vulnerabilities – such as unpatched software, phishing attempts and suspicious activity – and assesses potential risks to business operations. When high-risk threats are detected, mitigation actions are implemented promptly. Cyber-security performance is monitored regularly and reported to management, with foundational work completed in 2024 to support automation and the deployment of an AI-enhanced platform in 2025.
Promoting Cyber-Resilience Awareness
Valeura strengthens cyber-resilience awareness across the organisation through continuous training, thematic updates and function rotation in 2025. Cybersecurity training covered practical topics such as malware and ransomware protection, identifying insider threats, secure remote working practices, and Wi-Fi and mobile device security. These initiatives aim to build everyday vigilance against cyber threats both at work and outside the workplace.
As part of this programme, Valeura also conducted regular phishing simulation exercises. Mock phishing emails were circulated quarterly to all personnel – including the Board, executives, employees and contractors – to reinforce awareness, test readiness and embed a strong cybersecurity culture across the organisation.
Leveraging Technology
Valeura’s approach to innovation and digital solutions supports operational resilience and performance improvement, as illustrated by the following examples:
In October 2025, Valeura implemented downhole water injection via the chemical injection line of WSA-23H to reduce ESP motor temperature and stabilise production. The well had been producing high-viscosity oil (>70 cp) at 280 BOPD with a 2–3% water cut, but rising motor temperature led to repeated shutdowns in September 2025, resulting in a production loss of 280 BOPD. The solution used a Floating Storage Offloading Vessel (FSO) to return water with a low temperature of 104°F and a low oil-in-water content of <50 ppm, and required no significant additional OPEX or CAPEX.
The initiative reduced ESP motor temperature by 14°F (from 333°F to 319°F) before stabilising at 329°F, allowing the well to operate below the 335°F trip set point without further trips. Production was maintained at 280 BOPD, with water cut increasing slightly to 4%. Valeura estimates the initiative will generate US$16.4 million in incremental revenue over 27 months (October 2025 to December 2027), while avoiding USD 1.0 million in ESP replacement workover costs, for a total estimated value added of US$17.4 million.
Valeura developed VE Smart Logistics, a fully integrated in-house platform to streamline offshore logistics operations in Thailand. The system consolidates personnel registration, qualification tracking, aviation and marine transport, accommodation management, and offshore travel requests into a single workflow across all offshore facilities. It replaces fragmented spreadsheets, manual processes and legacy systems, while improving planning accuracy, People on Board (POB) monitoring, and qualification checks, including certification and medical requirements.
The platform digitises offshore logistics to reduce manual data entry and human error, using role-based workflows and permissions to support efficiency and data protection. Designed for scalability and configurability, it also reduces reliance on third-party systems. In 2025, Excel-based planning was replaced with automated reports and dashboards, improving offshore travel planning efficiency and reducing operational costs by eliminating third-party software licences.
In 2025, Valeura expanded its internal data management platform to include health and safety data, strengthening oversight of operational performance and workforce wellbeing. The system updates monthly, ensuring timely and reliable information.
An automated dashboard, powered by in-house analytics, enables real-time tracking of health and safety KPIs. This improved visibility supports earlier risk identification, helping prevent incidents and drive continuous improvement.
Network Operation Centre and Security Operation Centre
Valeura is in the process of implementing a phased programme to monitor critical IT infrastructure and server performance, enabling early detection of potential threats and timely notification of relevant personnel. This supports rapid response and helps maintain uninterrupted operations.
Evaluation of Performance
Cyber-Resilience
In 2025, Valeura strengthened its cybersecurity framework to enhance operational resilience in an increasingly complex digital environment.
During the year, the Company updated cybersecurity policies and incident response plans to address evolving global threats, with increased focus on protecting operational technology (OT) assets and critical infrastructure.
Valeura also promoted a cyber-aware culture through training and phishing simulations to strengthen threat detection and response capabilities. Monitoring of zero-day vulnerabilities, supply chain and third-party risks was further enhanced to address emerging industry threats.
Operational Threat Management
In 2025, the Company processed 8,657,653 incoming emails, of which 324,159 were blocked as malicious or phishing attempts, representing an interception rate of 3.75%. The remaining 8,318,049 clean emails were delivered to users, demonstrating the effectiveness of Valeura’s email filtering systems in preventing harmful content from reaching endpoints.
Malware and antivirus controls also operated effectively, with strong containment and triage capabilities resulting in no high-impact incidents.
Valeura maintained 14 active firewalls across its OT and IT environment throughout 2025, serving as a key line of defence against cyber threats. During the year, the firewall intercepted ~842.9 million threat events, segmented as follows:
Investment Performance & Maturity Progress
Valeura’s cybersecurity investment in 2025 reflected a disciplined prioritisation approach. While many small- to mid-sized oil and gas companies in the region increased cybersecurity spending, Valeura’s expenditure decreased.
Despite lower spending, the Company continued to strengthen and mature its cybersecurity posture, both internally and externally.
Innovation and Continuous Improvement
In 2025, Valeura initiated 61 Continuous Improvement (CI) projects, with a combined OPEX and CAPEX value of US$13.4 million as of year-end. This reflects strong employee engagement and a growing culture of innovation within the Company.
The CI programme directly enhances operational efficiency and creates measurable value for the business. As it represents a broader shift in organisational culture, the initiative is also expected to generate further value and support the long-term sustainability of Valeura’s operations.
