Investor Presentaiton

62 62 63 麻 Product safety Risk movement: We consider the safety of our customers to be paramount. Unsafe products may result in injury, harm or illness to our customers. If we are unable to meet the requirements of our product safety frameworks, we will be subject to regulatory impacts, claims, and reputational damage. Our risk management approach includes: . . dedicated product and food safety teams across the Group who lead our response to customer complaints and the withdrawal or recall of products when required clear end-to-end procedures and processes for managing product safety in our supply chain from design, manufacturing, transport, and storage to customer purchase ongoing review and monitoring of controls throughout the product lifecycle to confirm compliance with mandatory and internal safety requirements using diverse data sources and analytics to identify product safety issues. Committee: B R G RAS Lead: Managing Director, Woolworths Food Company Committee: A Audit and Finance Committee B Board Pay and entitlements Risk movement: Paying our team correctly and rewarding them fairly is critical to maintaining trust, team member engagement, reputation and living our values of caring deeply and doing the right thing. We acknowledge our historical challenges in this area. We remain focused on repaying pay shortfalls, while bolstering our internal processes and governance so we are confident we are paying our team correctly. Our risk management approach includes: . . • clear leadership and accountability for our pay program across the Group significant focus and investment in understanding our obligations and enhancing our pay processes ongoing review and monitoring of controls across our end-to-end pay processes, including changes to our business, systems, and external environment proactive reviews of our industrial instruments (including over 30 enterprise and collective agreements in Australia and New Zealand) to confirm appropriate system configuration continuing our remediation programs, including making repayments to current and former team members a range of governance and oversight mechanisms, including specific management forums and regular reporting. Committee: B P G RAS Lead: Chief People Officer P People Committee R Risk Committee G Group Executive Committee S Sustainability Committee People Risk movement: Our team is critical to our success. We must attract, retain, and develop team members with diverse skills, capabilities and backgrounds. We know that building a great team experience is core to achieving this goal. Our risk management approach includes: attracting and retaining a diverse workforce that reflects the communities in which we operate, with clear targets and inclusive hiring program striving for an inclusive, safe, and caring work environment through deliberate steps to address bullying, harassment and discrimination building a Customer 1st, Team 1st culture which aims to provide a sense of belonging and inclusion, giving everyone an equal opportunity for growth and development investment in dedicated people risk management initiatives to understand and build confidence across a range of team-related risks (including pay, resourcing, conduct and behaviour, industrial action, data, privacy, and safety, health and wellbeing) listening to our team members through Voice of Team surveys and other mechanisms to adapt and refine our existing people strategies and continuously improve team experience embracing agile and flexible working, including refreshed physical spaces in many of our support offices and a 'work from anywhere' policy (including internationally) within certain guardrails focused attention on proactive talent management and strategic workforce planning to confirm that we have the skills we need today and for the future. Safety, health and wellbeing Risk movement: Providing a safe and healthy workplace for our teams (including contractors) and customers is one of our foundational objectives, ensuring all return home safely, every day. We maintain high standards of control to reduce the likelihood of serious injury and fatality risk. Along with physical health and safety, we are committed to managing the risk of psychosocial hazards in the workplace, which could cause harm to our teams' mental health and wellbeing, such as bullying, harassment (including sexual harassment, workplace violence, aggression, and mental stress). Our risk management approach includes: ensuring all leaders are accountable and provide active leadership, along with their teams, for creating a safe and healthy workplace a dedicated safety, health and wellbeing team who provide technical expertise and support; regular safety, health and wellbeing training provided to all team an independently verified safety management system that proactively manages both occupational injury and illness; along with material events that may lead to serious harm ongoing review and monitoring of controls, supported by independent assurance activities to assess their effectiveness Board, management and business-unit specific health and safety governance to oversee the key metrics and monitor the effectiveness of related controls offering Good Shepherd, a financial wellbeing program, to provide support and solutions for team members utilising Sonder proactive wellbeing, alongside support during challenging times or after an incident. Privacy and data management Risk movement: Quality data is one of our most important organisational assets which positively impacts how we make investment, strategic, and operational decisions. The misuse of customer and team data has the potential to result in significant brand and reputational damage, adverse regulatory outcomes, financial impacts, and loss of customer trust. Our risk management approach includes: . . . dedicated privacy, data ethics, data stewards and risk experts embedded across the business to provide specialist support the establishment of a comprehensive set of frameworks to manage privacy, data ethics, and data management risk regular training and awareness programs to provide our teams with an understanding of privacy and data management commensurate to their role and responsibilities launching the Woolworths Group Privacy Centre to provide increased transparency to our customers on how we manage their personal information the Woolworths Group Data Governance Council establishes best practices on how data is managed across our business processes to respond to data or privacy-related incidents or complaints should they occur. Committee: B R G RAS Lead: Managing Director, WooliesX; Chief Information Officer & Director, Group Enablement Customer Risk movement: Changing customer expectations requires us to continually evolve our business model to meet their needs and preferences, with impacts to brand, reputation and market share if not managed effectively. Our ability to respond to our customers' needs and expectations has been particularly important in the context of rising cost-of-living pressures in Australia and New Zealand caused by a high-inflationary environment and rising interest rates. Our risk management approach includes: dedicated customer strategy, marketing, and insight teams working closely together to monitor trends and developments both locally and globally to assist in a cross-functional and holistic response to our customer propositions across the Group listening and engaging with our customers through Voice of Customer surveys and adopting learnings into existing strategies sharing qualitative and quantitative customer feedback from our stores, customer hub, and online channels with our teams to improve our customer proposition in our stores and online. Committee: B G RAS Lead: Chief Transformation Officer; Chief Marketing Officer; Director of Government Relations and Industry Affairs Annual Report 2023 Woolworths Group 1 highlights Performance 2 Business Directors' review Report 4 Financial Report LO Other information Risk movement: Increase Committee: B P G RAS Lead: Chief People Officer Committee: B P G Decrease No change RAS Lead: Chief People Officer