Risk Management Report
Description and Statement Relating to Risk and Compliance Management
Integrated Approach to Risk and Compliance Management
Risk and compliance management are an integral part of corporate management at WACKER. As a global company, we are exposed to numerous risks directly attributable to our operational activities. Starting from an acceptable level of overall risk, the Executive Board decides which risks we should take to utilize opportunities available to the company. The goal of risk management at WACKER is to identify risks as early as possible, to evaluate them adequately and to take appropriate steps to reduce them. We define risks as internal and external events that may have a negative effect on the attainment of our targets and forecasts. Compared with the previous year, we made no fundamental changes to the existing risk management system in 2018. The scope of consolidation for risk reporting purposes comprises all WACKER majority shareholdings.
As a chemical company, we have a particular responsibility to ensure plant safety and protect human health and the environment. At all our production sites, there are employees who are responsible for plant and workplace safety and for health and environmental protection. Our risk management system complies with legal requirements and is integral to all our decisions and business processes. The Executive and Supervisory Boards are regularly informed about the current risk status in the Group and at each business division.
WACKER follows the “Three Lines of Defense” model to effectively manage corporate risks and ensure compliance with legal provisions and the ethical principles of corporate management.
“Three Lines of Defense” Model
The first line of defense is centered on operational management, which involves coordinating, monitoring and managing the risks that arise. It also includes the establishment of functioning internal control systems within the individual operational units.
The second line of defense is formed by risk and compliance management. Risk management systematically tracks the main risks facing operational units and reports on the risks to the Executive Board. Compliance management ensures that the ethical principles of corporate management are observed. It identifies the relevant legal requirements and amendments, forwards them to all affected corporate units and holds courses on compliance for employees. The tax compliance management system ensures that Wacker Chemie AG and its subsidiaries comply fully and punctually with their obligations under tax law. Early involvement of the tax department and checks on preliminary tax-related processes help minimize the corresponding risks.
A third line of defense is provided by the Corporate Auditing department, which acts as an independent monitoring body for the Executive Board. This department conducts audits at regular intervals to review the risk management activities in place at the various corporate units and to check whether the internal control systems run by the operational units are effective. Corporate Auditing also liaises with the Compliance Management team, for example if anti-corruption investigations are undertaken or related measures implemented.
Risk Management
WACKER focuses on identifying, evaluating, managing and monitoring risks as part of a transparent risk management and control system for all company processes. The system is based on a defined risk strategy and an efficient reporting procedure. It involves the Executive Board regularly reviewing and enhancing our risk strategy, particularly with regard to our groupwide processes for strategic planning and reporting. The Executive Board provides the Supervisory Board’s Audit Committee with regular briefings on existing risks.
All corporate areas are integrated into the risk management system. It consists of three intermeshed aspects:
- Division-specific risk management and early-warning systems
- Groupwide risk coverage
- Groupwide risk mapping
The CFO has overall responsibility for the effectiveness and appropriateness of the risk management systems.