Business-Impact and Priority Assessments

When assessing how a situation may positively or negatively affect the business, we focus on likelihood and impact. Each attribute receives a numerical score, assigned by Business Resilience or Crisis Team members, or from insurance or other external analytics. Assessments are reviewed at least annually. Each Team defines, executes and measures the results of action plans in order to minimize the risk or maximize the opportunity.

Plans

Teams document resilience and crisis plans, including regular training and exercises. The plans build awareness and spread knowledgeabout how to handle risks and opportunities. Training covers key roles and responsibilities, action protocols and how to handle site-specific scenarios.

We conduct risk exercises, at least annually, to test the effectiveness of plans for a wide range of potential disruptions. This includesdisruptions caused by events such as equipment failures, externally provided products, processes and services, natural disasters, fires,utilities, labor shortages and IT issues and cyber-attacks.

Notification

We utilize multiple internal and external alert systems to notify us if there are incidents at or near our sites so responses can beginquickly at the local, regional or global level. We also use a geographic information system that includes the latitudes and longitudes ofour suppliers so we can identify incidents that may affect them.

We conduct risk exercises, at least annually, to test the effectiveness of plans for a wide range of potential disruptions. This includesdisruptions caused by events such as equipment failures, externally provided products, processes and services, natural disasters, fires,utilities, labor shortages and IT issues and cyber-attacks.