1. Strategic planning, target setting and detailed budgeting process, conducted in a structured manner guided by relevant Standard Operating Procedure, for each operating unit which are approved both at the Business Unit level and by the Board. 2. Utilisation of the Procurehere system that promotes transparency for the critical purchasing category at the headquarters level. Major purchases are reviewed and awarded by the respective authority (based on the value Limits of Authority). 3. Implementation of the Company’s Strategy Framework and Framework of Internal Control. Control Activities 4. Established a Training and Development function that oversees the planning and execution of programs to ensure that staff are kept up to date with the necessary competencies to carry out their responsibilities towards achieving the Group’s objectives. 5. Enhanced Performance Management process which better reflects the actual individual’s and BPlant’s performance. 6. Proper monitoring on the establishment and the role of Gender Committees in estates and palm oil mills to foster a more inclusive and fairness at workplace. This effort primarily focuses on empowering women through awareness, training skills, addressing gender related issues and help to increase human resources productivity. 1. Whistleblowing policy to provide an avenue for employees to report on any breach or suspected breach of any law or regulation, including business principles and the Group’s policies and guidelines in a safe and confidential manner. 2. Increase awareness of E-Adu by providing information and training to the operating unit about the features, functionalities, and benefits of the E-Adu platform, facilitating a transparent grievance mechanism. 3. Consolidated monthly management accounts and quarterly forecast performance which allows management to focus on areas of concern. 4. Confirmation obtained from the Senior Management and/or Risk Officer on the effectiveness of the system of internal control, highlighting any weaknesses and changes in risk profile through half-yearly Risk Declaration. Information Activities 5. Implementation of advanced information technology tools and techniques to secure and manage communication infrastructure. 6. Cybersecurity online training to increase awareness, reduce risk and prevent cyber-attacks through malware, ransomware, unauthorised access, corruption and/or loss of sensitive information. 7. Training and/or refresher sessions to improve knowledge on existing or new policies and procedures by principal departments. Integrated Report 2023 121
RkJQdWJsaXNoZXIy NTkwNzg=