Report and Accounts 2011 | 1 - Efacec

Risks associated with
information systems
Efacec’s Information Systems
are a crucial element for its
management, reason why
they can also become risks
for Business Continuity. Risk
Management is made by the
���������������������������������
methodologies.
Risks and Opportunities are
��������������������������������
several Services provided. Each
�������� ��� �������� ��� ���������
and Risk Assessments, which
identify their Accessibility,
�������������� ���������������
and Integrity requirements.
The respective Threats and
Consequences of each crucial
Event (including situations of
Catastrophe, External Attacks
and Operational Risks) are
����������
The Threat probability and the
impact of the event serve as
the basis to assign a criticality
rating, which allows prioritizing
Risks and Opportunities
addressed in the future.
���������������������������������
of these Risks, it is established
a Prevention, Reaction (course
of action in case of Crises)
and Risk control Plan, which
includes the installation of
system redundancy, purchase
of equipments and protection
software, change of practices
and Employee training.
Financial risks
Efacec’s activities are exposed
��� �� �������� ��� ��������� �������
market risk (including exchange
risk, price risk and interest rate
����������������������������������
credit risk and liquidity risk.
The management of
��������� ������ �������� ��� ����
����������������� ��� ���������
markets and seeks to minimize
potential adverse effects on
���������������������
�������� ��������� ������������
are used to minimize said Risks.
However, the Group relies on
����� ��������� ������������ �����
to cover Risks arising from
its business activity. Policies
concerning Financial Risks
are described in detail in the
������������������������
Optimization of Activities Facts and Performances;
Governance Model; Orders and
Achievements
Risks of availability and
adequacy of Human
Resources
Efacec’s Management of Human
Resources is a function shared
between Business Units and
Market Units. Generally, Efacec
establishes preventive processes
in order to mitigate Risks and
Opportunities associated with
the availability and suitability
of Human Resources.
Examples of these processes
are Performance Assessment,
Recruitment and Selection,
Training and Development
���� ������� ���� ���������� ����
Integration process.
Talent Management is a
�������� ������ ��� ���������� ����
company’s key staff.
Efacec has developed efforts
in order to implement annual
programs that make the
organization more attractive for
its Employees. These include
programs that reconcile work
and personal life (for example,
Efacec sponsors its Employee
associations to promote the
occupation of spare-time)
and career opportunities are
frequently provided.
Innovation and R&D;
Improvement of Human
Resources; Relations with
Society
Image and reputation risks
���� ��������� ��� ������ ������
������ ����� ������ ���������� ���
other categories. Risks and
opportunities associated with
the communication channels
themselves are essentially
managed by the corporate
communication function.
Corporate communication is
responsible for identifying
present opportunities,
selection of more adequate
communication channels,
content design and control
��� ������������ ���� ���
the exterior. Additionally,
monitoring mechanisms have
been implemented to monitor
the presence of Efacec among
the media and in several social
information platforms.
Governance Model; Operational
Organization
Risks of irregular practices
and compliance with
regulations
Efacec establishes codes of
ethics to guide activities of all
its Employees and identify its
corporate Values and Principles.
Corporate ethics are described
by the Sustainability Policy.
Requirements of personal
ethics from Efacec Employees
���� ���������� ��� ���� ����� ���
Conduct and Personal Ethics.
Among the established Values
are found Integrity and Honesty.
������������������������������
that provides legal support
to its several activities, the
responsibility of continuously
analyzing the publication of
new laws and internally carry
out the necessary changes.
When necessary, Efacec also
uses external advisory services.
The several audits performed
every year at Efacec are crucial
instruments to verify and
������� ���� ����������� ��� ����
laws and other internal and
external regulations. These
audits can be carried out by
external entities or by Efacec’s
internal functions.
Governance Model;
Operational Organization
Report and Accounts 2011 | 33