2024 UEM Edgenta Annual Report

INTEGRITY AND GOVERNANCE CORE FUNCTIONS At UEM Edgenta, we are committed to combating bribery and corruption through structured initiatives designed to foster a culture of integrity and strengthen governance practices. This commitment is spearheaded by the Risk, Integrity and Compliance Department (RICD), whose key roles in integrity and governance core functions encompass two main pillars, each with distinct roles and responsibilities aimed at achieving robust organisational accountability and ethical operations: This pillar focuses on safeguarding ethical standards and managing risks through four key functions: This pillar ensures adherence to internal policies, regulatory frameworks, and governance practices through two key functions: Complaint Management Ensures effective handling of complaints and reports of misconduct. Detection and Verification Identifies and verifies reported issues on misconduct. Integrity Strengthening Promotes ethical behaviour through targeted initiatives and awareness programmes. Security Management Ensures the protection of assets, people, and information against threats. Governance Oversees the implementation of strong governance frameworks and structures. Compliance Ensures conformity with legal and regulatory requirements across all business operations. • Authorities’ Raid Procedure UEM Edgenta’s Authorities’ Raid Procedure provides clear and practical guidelines to ensure an effective, coordinated, and compliant response during an authority raid. This procedure outlines the necessary actions and responsibilities for handling such situations, emphasising swift coordination and alignment with legal requirements. It encompasses detailed guidelines and key steps to address challenges and demands during such encounters. This procedure aims to safeguard the interests of UEM Edgenta while ensuring adherence to applicable laws and regulations. It underscores our commitment to preparedness, transparency, and protecting the Group’s integrity in critical situations. • Non-Compliance Incident Reporting (“NCIR”) Procedure The Non-Compliance Incident Reporting (“NCIR”) Procedure establishes a structured and timely approach for identifying, documenting, and addressing non-compliance incidents. This includes conducting root cause analysis, implementing corrective actions, and introducing preventive measures to foster continuous improvement and prevent recurring operational lapses within UEM Edgenta. This Procedure reinforces our commitment to maintaining the highest standards of governance, accountability, and operational excellence. Integrity Enforcement & Security Management Governance and Compliance Corporate Integrity and Ethical Business Conduct UEM EDGENTA BERHAD 256 Integrated Annual Report 2024

RkJQdWJsaXNoZXIy NDgzMzc=