Information Protection & Cyber Security Only Connect Authorized Devices and Use Encryption Be Secure Presentation Information Protection & Cyber Security INTERNAL

Only Connect Authorized Devices and Use Encryption External devices are frequently used for work purposes. As a result, they are one of the most common ways to attack companies. Don’t connect unknown, non-BASF, found or private devices to the BASF infrastructure. And remember to encrypt sensitive information. Only use BASF authorized devices and preferably encrypted USB sticks for business purposes Use encryption when storing (strictly) confidential information on USB sticks, etc. Close your wireless device connections like Bluetooth or Wi-Fi after use By using corporate devices for storing corporate data and encrypting them you avoid security breaches and protect BASF information. Unknown, non-BASF, found or private USB sticks BASF authorized USB sticks either with integrated encryption or additional encryption software (e.g. WinZip) INTERNAL

Use USB sticks with integrated hardware encryption How to setup the encryption on your USB stick? Plug in the USB stick and a USB drive (for installing purposes only) shows up. Set up your personal password by double-clicking the „DTVP_Launcher.exe“ file. The launcher will guide you through all setup steps. After setup, a separate drive will appear in your Windows-Explorer, where files can be saved. What do I need to know for setup and usage? Use a strong password and memorize it. Make sure it is different from other passwords you are using. Only store copies of centrally managed documents, because… … if you forget your password, the data is lost! (You can reset the stick and use it again) INTERNAL

Encrypt information with Winzip How to encrypt information using WinZip? Search for WinZip in the Start Menu. Open WinZip and switch the option “Encrypt” to On at the right side of the window. Choose the folder or files to be saved in encrypted WinZip form. Enter a strong password and confirm. Click the button “Save as” to finish the procedure. 1 2 For transferring large amounts of information to external partners, use SecureDocXpress. There is a limit of 5 files or 2 GB per batch. INTERNAL

Further information Be Secure Portal including videos, infographics, FAQs and e-learnings Information Protection Minimum Requirements Do you need more information? Contact us: Your Information Protection Officer Be Secure (be-secure@basf.com) INTERNAL