Practices

Responsible governance is embedded in how we deliver across our business, helping strengthen accountability, transparency and responsible decision-making at both global and local levels.

As part of this commitment, we continuously look for new ways to strengthen awareness and understanding of our policies and ethical standards across the organisation.

In the Americas region, Compliance Week 2025 was delivered as a targeted engagement campaign designed to reinforce our culture of integrity and encourage active participation with our Code of Conduct. Through online and physical interactions, regional teams delivered localised, interactive content reinforcing ethical behaviour and reducing regulatory risk.

As a data-led business, protecting our information systems and customer data is paramount. We continue to invest in robust cybersecurity infrastructure, regular audits and colleague training to foster a strong security culture.

The measures we take embed data privacy across our operations, reinforcing responsible business practices, data protection and transparency.

Over 2025, we have:

• improved how we identify, assess, govern, manage and assure cyber risks on a continuous basis;
• improved metrics and reporting to better understand our cyber risks and how our remediation teams are performing;
• established clearer ownership for cyber risk remediation and accountability; and
• rolled out a global AI Policy framework, ensuring consistent governance of emerging technologies and supporting responsible adoption across markets.

We also enhanced key processes and controls, including third-party risk management, risk and issue management, secure development practices, and Security Incident Response and playbooks.