Risk Management and Business Continuity
Risk Management
Assess and review 100% of enterprise risks, covering strategic, operational, financial, legal and regulatory compliance, and sustainability risks, in accordance with the annual assessment cycle.
Integrate 100% of material ESG risks and emerging risks into the enterprise risk register and establish corresponding risk management plans by 2029.
Establish risk response plans and monitor the implementation of 100% of high and very high risks in accordance with the specified review cycle.
100% of directors, executives, risk owners, and relevant personnel receive annual communication or training on risk management.
Business Continuity
100% of critical business processes have Business Continuity Plans (BCPs) in place, which are reviewed annually or whenever significant changes occur.
Conduct Business Continuity Plan and emergency response plan exercises at least once a year, with follow-up actions to address issues identified during the exercises.
Conduct testing of IT disaster recovery plans and cybersecurity incident response plans at least once a year.
Minimize the impact and duration of business disruptions by ensuring that critical processes and systems can resume operations within the timeframes defined by the Company.
Risk Management
The Company continuously implements Enterprise Risk Management (ERM) under the COSO ERM framework.
Key organizational risks are regularly assessed and monitored.
ESG risks and emerging risks are integrated into the enterprise risk management process.
Risk management results are regularly reported to the Board of Directors and the Risk Management Committee.
Internal control measures are reviewed and improved to align with evolving risk conditions.
Business Continuity
Review and update the Business Continuity Plan (BCP) to align with current risk conditions.
Prepare readiness measures to respond to emergencies and business disruptions.
Develop measures to address information technology risks and cybersecurity threats.
Continuously review response and recovery approaches for crisis situations.
Challenges and Opportunities
Risk Management
Challenges
The Company faces increasingly complex and rapidly evolving risks arising from both internal and external factors, such as economic volatility, raw material price fluctuations, regulatory changes, environmental and climate-related risks, cybersecurity threats, as well as ESG and emerging risks that may impact business operations and competitiveness.
Opportunities
Proactive risk management enhances the ability to anticipate and respond to uncertainties, reduces the impact of adverse events, supports strategic decision-making, and strengthens long-term business stability and resilience.
Business Continuity
Challenges
Emergency events, disasters, supply chain disruptions, information system failures, and cyber threats may impact production, service delivery, and stakeholder confidence.
Opportunities
An effective Business Continuity Management system enhances crisis preparedness, reduces operational impacts, ensures business continuity, and strengthens confidence among all stakeholder groups.
Management Approach and Value Creation
Risk Management
- Implement enterprise risk management in accordance with the COSO ERM framework.
- Establish a clear risk governance structure covering the Board of Directors, Risk Management Committee, executives, and operational units.
- Regularly assess, monitor, and review strategic, operational, financial, legal, and sustainability risks.
- Integrate ESG risks and emerging risks into the enterprise risk management process.
- Continuously develop internal control systems and risk management mechanisms.
Business Continuity
- Regularly develop and review the Business Continuity Plan (BCP).
- Prepare for emergencies, disasters, and crisis situations that may impact business operations.
- Develop crisis management measures, system recovery processes, and critical data backup systems.
- Strengthen cybersecurity and information technology readiness.
- Conduct regular testing and drills of emergency response and business continuity plans.
Stakeholders Directly Impacted
