? Adverse systems through theft and misuse of confidential Action was taken this year to further develop our effect on data, damage to or manipulation of operationally security profile and maturity against the reputation critical data or interruption to our IT services, internationally recognised National Institute of ? Potential any of which may have serious consequential Standards and Technology - Cyber Security Framework. legal impacts on our reputation, ability to trade and During 2020 we successfully introduced a 24/7 action, compliance with regulations including GDPR. security operations centre capability to monitor for fines and suspicious activity and behaviours and work with penalties resolver teams as required. We assess our main risk of attack to be from opportunistic criminals seeking financial gain from the theft and sale of personal data. We have a cyber-incident response protocol, which is updated with lessons learned from responses to During 2020, the Covid-19 pandemic appears to attempted attacks on the Group and external cases. have heightened this risk and we have seen an Third party forensic capability is in place, should increase in the volume, frequency and it be needed, to support our ability to respond sophistication of attempted cyber-attacks during rapidly and effectively to an incident, restore this period, which is expected to continue. We systems and demonstrate compliance. also face internal risks of data loss or leakage as a result of actions taken by colleagues, whether accidental or deliberate. Our strategy to modernise and digitise capabilities also presents We will prioritise a number of security focused a further dimension to cyber and data security programmes in 2021 to further minimise the risk risk. profile. This includes programmes focused on maintaining GDPR compliance and the optimisation of security technology. People Impact Risk description Risk mitigation People are key to our success. Our ability to Strategic initiatives are in place in relation to recruit, develop, retain and motivate suitably diversity and inclusion and knowledge management. qualified and experienced staff is an important Further information on progress made during the year driver of our overall performance. can be found in the Diversity and inclusion report on page 62. The strength of our customer proposition is underpinned by the quality of our people, The Group's employment policies and practices are particularly those in branch and other customer kept under regular review. facing roles. Many colleagues have worked for us for many years, during which time they have amassed valuable product and customer knowledge and expertise. Retaining those colleagues is key Staff engagement and turnover by job type is to continuing high levels of customer service and reported regularly to the Group Leadership Team and maintaining our competitive advantage. the Board. ? Adverse effect on Ensuring the retention and development of our An established talent and succession process is in delivery of employees, and that robust succession plans exist place, which will be reviewed and refreshed in 2021. strategy for key positions, is important for us to ensure The process is run annually with plans for the most ? Competitive that we have the right skills and experience to senior and critical roles reviewed by the Board. disadvantage deliver on our strategic objectives. ? Adverse effect on reputation The Group's reward and recognition systems are We are exposed to skills shortages in certain actively managed to ensure high levels of employee areas which can result in salary cost pressures. engagement. Salaries and other benefits are In particular, the availability of suitably benchmarked regularly to ensure that the Group qualified commercial drivers remains an area of offering remains competitive and the Group operates ongoing focus, which is critical to the operation incentive structures to ensure that high performing of our fleet to meet customer delivery colleagues are adequately rewarded and encouraged to expectations. remain with the Group. We recognise the benefits of a diverse workforce A wide range of training programmes are in place to and an inclusive workplace, to ensure that encourage staff development. Management development everyone feels welcome, valued for their programmes are available to those identified for contribution and able to perform at their best. more senior positions. The Group's award-winning Making progress in this area will take time and "Learn and Earn" Apprenticeship Programme ("LEAP") there is a risk that we are unable to move has been in place for a number of years and has a quickly enough to capture the benefits or meet track record of successful delivery of colleague and customer expectations. apprenticeships in both branch- based and functional roles. Health, safety & well-being Impact Risk description Risk mitigation Health, safety and well-being is one of our fundamental values. We continue to challenge our thinking and approach to improving safety performance through our well established "Stay Safe" brand. Steps have been taken in 2020 to build on our reporting programme and empower colleagues to "Call It Out" if they see anything that they consider to be unsafe. Guidance has been issued to support colleagues through difficult customer conversations. Regular communications highlight examples where "calling it out" has avoided a safety issue, which is helping to generate an even more open reporting culture around safety. Keeping our colleagues, customers, suppliers and the public safe is a cornerstone of the business and at the heart of how we operate. We expect everyone to go home to their families safely Governance of Stay Safe is well established and every day. designed to promote a continual focus on health and safety. Stay Safe performance is reviewed at all Board meetings, by the Group Leadership Team, by every business leadership team and by the dedicated ? Harm to our We operate a large estate, with many sites Stay Safe Committee, which is chaired by a colleagues, running complex and busy yards. We also operate Non-executive Director. In these forums we also customers or one of the largest vehicle fleets in the UK, monitor the the public distributing heavy and bulky materials. Certain ? Potential products that we sell pose health and safety achievement of transport compliance requirements. legal risks. Poorly implemented safety practices on The Fleet team has recently been restructured and is action, site, on the road and at delivery locations could in the process of delivering improvements against a fines and result in significant harm to our colleagues, Fleet and Driver roadmap, continuing into 2021. penalties customers and the wider community. ? Adverse effect on reputation Incidents are monitored, investigated and corrective The Covid-19 pandemic has had a profound impact action taken to address the root cause. For more
(MORE TO FOLLOW) Dow Jones Newswires
March 02, 2021 14:55 ET (19:55 GMT)