Close Close

Vale employee smiling in green landscape. She is wearing a green Vale
uniform, goggles, helmet and ear plugs. Visual wave artifact Vale
com.liferay.portal.kernel.util.DateUtil_IW@24c8643
Photo: Vale / Image Bank
com.liferay.portal.kernel.util.DateUtil_IW@24c8643
Photo: Vale / Image Bank

The Company is aware of the importance of risk management in every aspect of the business.

The Company has applied the risk management system which considers ISO 31000, ISO 55001 and COSO-ERM on Risk Management and Asset Management. This system is used for the management of risks that are strategic/business or operational, which affect the entire organization and have a negative impact on the business objectives of the Company. 
The Company implemented the 3 lines of defense concept as an effort to improve risk management and control. This concept distributes duties and respo​nsibilities to 3 lines of defense, with each having specific duties and responsibilities, but a single objective to support achieving the Company’s business purposes through effective risk management.

3 Line of Defenses Concept in the Implementation of the Risk Management of the Company

The First Line of Defense

Is the party that directly interacts with risk on a daily basis and acts as a risk owner. With support from the Internal Control, Front Line Management serves as the First Line of Defense to ensure the execution and effectiveness of precautionary measures and mitigation controls as well as work plans to reduce risk.

The Second Line of Defense's

duties is to support senior management in the implementation of risk management measures and provide technical skills to monitor First Line of Defense in risk management and control. The Second Line of Defense includes the Risk Management Unit, Health Safety & Operational Risk Department, Operational Planning & Geotechnical Department, Operational Excellence Department, and Governance Officer.

The Risk Management Unit was established on May 4th, 2016 and is responsible for facilitating the Company’s risk process. The Risk Management Unit’s duties include risk assessments, preparing preventive controls and risk mitigation plans, monitoring preventive controls and mitigation plans, evaluating risk management processes, and preparing reports to the Board of Directors and the Risk Mitigation Committee.

The Third Line of Defense

Is an independent party outside the Company administration. Its function is to ensure consistent performance of the First and Second Lines of Defense in accordance with the Company stakeholders’ expectations. This function includes Internal Audit and Corporate Integrity Division.

Find out more






Photo: Vale / Image Bank
Onda