Sustainability Management in Governance & Economic Dimension

The Group is commited to conducting business with ethics in accordance with good Corporate Governance PolicY, Code of Business Conduct, and risk management principles, as well as proper investment in new businesses in compliance with relevant laws and regulations, including domestic and international tax compliance where the Group operates. The Group dissents corruption and bribery while promoting transparency and traceability, encouraging fair competition, and upholding social and environmental responsibility throughout the value chain. The Group also enhances the creation of long-term value for the business by innovating technologies, processes, and business models that meet the needs of customers and stakeholders, as well as fostering cooperation with suppliers and business partners for sustainable growth.

Corporate governance has been considered a crucial element of operations since the Company was established. The Corporate Governance Policy has been developed since 2017, including the establishment of the Code of Business Conduct. The Corporate Governance Committee is responsible for effective, transparent, and accountable management of the Group operations. Additionally, the policies related to corporate governance are reviewed and updated to ensure the appropriateness for the circumstances and alignment with international practices.

Corporate governance means a structured system that is aimed to create transparency and responsibility for the Board of Directors and management team to build trust among stakeholders. The objective of corporate governance is to enhance long-term competitiveness, create value for shareholders, and generate sustainable value.

The principles of corporate governance of the Company are as follows:

  • Compliance with legal requirements: Management and business operations must comply with laws, regulations, and the Board of Directors or relevant shareholders' resolution.
  • Responsibility: All stakeholders, including the Board of Directors and management team, must be aware of their duties and responsibilities.
  • Transparency: Business operations and activities must be traceable and transparent.
  • Participation: Acknowledge and accept the rights of shareholders and other stakeholders to participate in the Company's activities.
  • Value protection: Investments and use of resources must consider financial and economic returns.
Quality and Safety of Products and Services

Quality and Safety of Products and Services

The Group intends to deliver products and services with the highest quality and safety to foster trust and confidence among customers. It aims to retain existing loyal customers and expand to new customers in the future for sustainable wealth in business implementation. The quality and safety of products and services are the key considerations for customers in purchasing goods and services. Therefore, the Group concentrates on the quality and safety of products and services, environmental management, and stability of business operations, while embracing opinions of all stakeholders for continuous improvement and development of products and services.

The Group conducts business based on determined action plans. It set the performance targets by considering the appropriateness of characteristics of each business unit and evaluate the performance to measure the efficiency of strategies and to monitor the quality and safety of products and services.

Thoresen Shipping

Thoresen Shipping has expertise and experience in providing dry bulk carrier services for both main products such as coal, minerals/ores, grains, and other dry bulks, such as steel, fertilizer, cement, agricultural products, timber, et cetera. With the commitment to gain customer trust and confidence, the company set the target to provide the best and the most efficient service to customers. To maintain a high-quality service standard and reduce compliance risks, Thoresen Shipping provides services with adherence to requirements and conditions according to the Charter Party contract and complies with the international and local marine standards for shipping. Thoresen Shipping has assigned the Commercial Operations team to handle transportation management and the Marine Operations team to manage the crew resources to guarantee that Thoresen Shipping provides the best and safest service to customers.

PHC and STC

PHC operates its business with product quality and safety as its utmost priorities, as risks associated with lack thereof may lead to adverse effects on the quality of life and health of customers. Moreover, these risks can negatively impact PHC’s credibility, necessitating significant time and resources to recover. Therefore, compliance with food safety regulations can save costs in solving problems, reduce potential risks, and build customer confidence in the brand. Consequently, it encourages continuous purchase of products and services, which is a crucial factor in sustainable business growth.
STC has a vision to be the leading Mexican restaurant in Thailand and to deliver the best service with speed, friendliness, and accuracy to maintain the customer satisfaction level. The company is determined to standardize production to control the quality and safety of its products and services.

PHC and STC aim to maintain cleanliness and safety standards strictly and continuously as their fundamental management approach. This includes compliance with food safety regulations set forth by the Food and Drug Administration (FDA) and oversight under food quality and safety policies as per the Franchise Policy and company requirements of Yum! Brands, Inc.—comprising inspection and risk evaluation processes from both internal and external expertise to reduce risk factors. Additionally, collaborative discussions with raw material, packaging, and storage suppliers are carried out to determine preventive measures, and continuous monitoring of operations is conducted to mitigate quality and safety risks consistently.

Food Quality and Safety Management

Restaurants

  • All PHC and STC restaurants must be regularly audited for food and safety standards, including by the internal team and Yum! certified auditors.

Suppliers

  • PHC and STC's suppliers, including product and packaging distributors, food packaging, storage, and distribution centers, are audited according to Yum! Food Safety Policy at least once a year, or other relevant standards—including BRC and FSSC 22000.
  • In-class annual food safety standards training sessions for suppliers are carried out to ensure an understanding of the safety standards for products supplied to PHC.
  • For vegetable product procurement, the companies prioritize sourcing from suppliers that adhere to Good Agricultural Practices (GAP) standards and implement robust food safety control policies.

Employees

  • Branch managers must possess a food handler certificate issued by the Ministry of Public Health.
  • In-class or online training courses on the quality and safety of food are provided to all restaurant employees. All employees must take a health examination before joining the companies. In addition, the staff is instructed to wash their hands every time before entering the cooking area, as well as before food preparation, to ensure the cleanliness and safety of products before delivery to customers.

Customers

  • PHC and STC provide channels for receiving customer feedback and complaints regarding the quality and safety of products and also set out an investigation process for complaints and preventive measures to prevent recurrence.
Performance

In 2023, all staff members completed the food quality and safety training. In addition, 100 percent of Pizza Hut suppliers met food safety standards. Moreover, the companies also procure vegetables from producers who adhere to the Good Agricultural Practice(GAP) standards and have food safety control policies in place.

Results of the Quality and Safety of Food and Services Training
Participant in the quality and safety of food and services training Percentage of participation in the quality and safety of food and services training
2021 2022 2023
Employees 100 100 100
Suppliers 100 100 100

Both PHC and STC are committed to delivering quality and safe food to consumers to maintain their good health. Thus, the companies carry out food safety audits across their restaurants and suppliers every year, and the companies’ branches must be inspected to pass the standard requirements, including food safety standards, brand standards, and national legal standards, on an average of 2.35 times a year by an accredited third-party audit company with expertise in food quality and safety audits assigned by the franchise owner, to analyze the problems of each store for further improvement.

For Pizza Hut, a branch manager is responsible for controlling food quality and safety as well as operating the audit process. Consequently, there is a Food Safety Committee consisting of 2 Supply QAs and 2 Restaurant QAs and a meeting about the results of the inspection to find ways to improve and develop services and present to the team leader, store management team, and related departments. All the processes are to ensure successful operations and the quality and safety of food before delivering to customers. Moreover, PHC discloses nutrition information on its website to allow customers to stay informed about their food choice.

Flowchart of Pizza Hut Restaurant Visit
Flowchart of Pizza Hut Restaurant Visit

Additionally, the company has established channels for receiving complaints regarding the quality and safety of products and services, such as a call center at 1150, www.pizzahut.co.th, and www.facebook.com/pizzahutthailand. The call center serves as the frontline in investigating the quality and safety of products and services, after which it will report findings to the Operation Department for further investigation. After the investigation is completed, the company will improve its service, and the customer will be compensated by the Operations Department. The company will then study the complaints to find a way to prevent recurrence.

PHC has passed the Safety & Health Administration (SHA) Standards, which are voluntary standard practice guidelines for entrepreneurs or the prerequisites that establishments must have to protect against COVID-19. The Standards were established based on public health measures plus the standard of tourism products. The Ministry of Health and the Ministry of Tourism and Sports have created the SHA symbol to certify the quality of the establishment. Once the badge is received, operators will be assessed, and will also be randomly inspected by agencies under the Ministry of Tourism and Sports from time to time, which consumers can be confident that PHC is one of the establishments that are working towards improvement following the new way of life under sanitary safety standards.

SHA Standards

PHC has been approved by the Department of Health as a training organization for operators and food handlers.

As operators and food handlers are important people in sourcing raw materials, cooking, and serving clean, safe, and nutritious food, it is imperative to have knowledge and understanding of sanitation principles and personal hygiene as well as applicable laws. PHC employees are considered food handlers who have undergone such training. PHC, therefore, requested approval from the Department of Health to become a training organization and was later approved on 11 October 2021, resulting in PHC being able to fully train its employees. PHC employees can apply the knowledge to practice properly and be able to provide clean, safe food to consumers with adherence to good management in food establishments.

Department of Health Training

UMS

UMS has a key product strategy that involves selecting and improving the quality and efficiency of coal through a process of quality control and quality assessment by a team of experts and professionals to assess coal quality in terms of carbon content, moisture level, and concentration of sulfur dioxide. All customers will receive coal quality that is suitable for the steam boilers of their respective industrial plants for maximum efficiency in fuel combustion.

Customer Relationship Management and Complaint Management

Customer Relationship Management and Complaint Management

A positive customer relationship is one of the core values of successful business growth. To meet customer needs and satisfaction, fulfill a commitment to deliver quality, standardized, and reasonably priced products and services, as well as build customer trust, the Group has developed an optimal marketing plan. This is to provide customers with accurate and complete information for decision-making. In addition, the Group embraces customer's opinions complaints and implements satisfaction surveys to ensure continuous operational improvement and, in turn, obtain customer trust and keep a long-term relationship with suppliers. This will secure loyalty among existing customers and conversion across new customer base, along with sustainable business growth.

TTA

With product and service improvement plan through customer engagement, the Group is demonstrating its focus on capturing customer purchasing behavior, opinions, and suggestions, which reflect their expectations. The Group also relies on a management approach that specifies customer relationship management guidelines that are in alignment with the Company’s Code of Business Conduct. The Code of Business Conduct first came into effect in December 2009 and was recently updated in 2023. Following each amendment, the Company always communicates with the employees, conducts an evaluation to determine their understanding, and notifies all groups of stakeholders. The Group discloses the Company’s Code of Business Conduct, which covers the following approaches of customer relationship management, on its website (https://www.thoresen.com/en/corporate-governance/corporate-policy-documents)

  • Delivery of quality products and services that meet customer expectations
  • Provision of accurate and adequate information about products and services to customers in a timely manner
  • Compliance with regulations and conditions that are committed and promised to customers
  • Polite and efficient treatment towards customers to gain their trust
  • Protection of customer confidentiality and avoidance of data misuse for personal interest or the interest of other parties
TTA

Thoresen Shipping

Thoresen Shipping intends to ensure that the transportation service aligns with the contractual terms agreed upon with the customers. Thus, the company assigned the Commercial Operations team to oversee the transportation and associated services to ensure compliance with the agreements specified in the contracts.

PHC

PHC implements a customer relationship policy based on the concept of providing the best customer experience in terms of food safety and service quality via standardized and the most efficient operation. To enhance customer experience, an understanding of changing customer's needs and expectations is important to increase customer loyalty and customer base extension. Additionally, PHC has established guidelines for consumer protection in advertising. Advertisements must refrain from using messages that are unfair to consumers, including exaggerated claims and messages that may cause misunderstandings regarding the nature of PHC's products and services.

The main approaches to PHC’s customer relationship management are divided into two sections, including the Customer Relations Management Platform and Guest Experience Survey, along with the target setting and continuous performance measurement for product development.

Customer Relations Management Platform

PHC implemented the Customer Relations Management Platform to facilitate customer information management. It is a tool for analyzing and grouping customers as well as storing customer contacts to create sales promotion campaigns and introduce new products. It also creates positive customer experience and increases repeat purchase rate. For any projects with this tool applied in sales promotion, PHC relies on target setting and performance evaluation. However, format of the evaluation depends on the project target.

Guest Experience Survey

PHC developed the Guest Experience Survey form to gather all customer feedback to improve the products and services through satisfaction towards taste, quantity, price, information accessibility, ordering channels, service, et cetera. PHC provides online and SMS channels to collect customer complaints or suggestions while continuously analyzing the survey to search for root causes and develop monthly improvement plan. Moreover, PHC also sets a yearly Guest Experience Survey target to evaluate the effectiveness of customer satisfaction and customer relationship management.

Customer Complaint Handling Process
Customer complaint process
Customer complaint process

PHC established various channels to gather customer feedback and complaints to improve management approach and practices. In case there is a service complaint, the store manager will analyze the reported problem or complaint to find the cause, the location where a complaint arises, and the number of complaints. The company will then analyze the complaints to find measures to prevent recurrence. After that, it will conduct a customer satisfaction survey on resolved complaints. Until now, there have been no report of complaints about health and safety arising from Pizza Hut services.

Complaint channels
  • Call Center : 1150
  • Website : www.pizzahut.co.th
  • Mobile Application : Pizza Hut Thailand

To properly address customer needs, PHC has implemented plans for customer relationship and complaint management.

Guest Experience Survey Goals:

  • Overall satisfaction rate: 83 percent
  • Satisfaction with food safety: 85 percent

Long-term goal: Increase satisfaction by at least 2 percent from the previous year

Performance for the year 2023

Performance for the year 2023 Performance result
PHC 83 81.4
Number (Case) 2023
PHC Number of complaints 1,611
Number of resolved cases 1,611
Number of complaints reported and resolved for the year 2023
1,611 cases
Products and Services Quality and Safety
Quality and Safety of Products and Services
0 cases
Cyber Security and Data Privacy
Cybersecurity and Data Privacy
0 cases
Environmental issues
Compliance with Environmental Laws
0 cases
Human rights violations
Human Rights Violations

STC

STC aims to become a Mexican food brand that first comes to customer's mind. To provide superior products and services, the company implements a strategy to maintain long-term customer relationships, which is a primary driver of business success and growth. The company conducts customer satisfaction assessments by encouraging customers to fill out an assessment form at the bottom of the receipt and submit their feedback. The survey contains questions in various dimensions such as satisfaction with products and services, cleanliness, and safety measures during the COVID-19 situation, et cetera. In addition, the company also sets satisfaction goals and conducts post-performance assessment to determine progress. In 2023, the company focused on the improvement of operational standards in terms of speed of service to deliver the products and services to customers on time to optimize table turnover time and decrease congestion during rush hours.

In 2023, there were no report of significant customer complaints from any channels. However, the company devised a contingency plan in case of complaints. If a complaint is reported, the customer service team will contact the customer and apologize for the incident before offering solutions, or if the complaint cannot be resolved, the incident will be escalated to higher-level management for resolution. All complaints will be resolved within 72 hours and recorded in the system to prevent recurrence.

Complaint channels
  • Website : www.tacobell.co.th
  • FB : Taco Bell Thailand

UMS

UMS procures and verifies the quality of products that meet customer expectations, as well as continuously developing and improving production processes. The company has a dedicated department that provides consultation and customer service support for pre- and post-sales to promptly address customer issues by analyzing the causes of problems and providing solutions. Additionally, the company regularly visits and conduct meetings with customers to garner their feedback and suggestions and maintain a good relationship between the company and customers.

The company conducts business in conjunction with continuous product and service development to ensure customer satisfaction with responsibility, honesty, integrity, and business ethics. This is achieved by sourcing quality and standardized products and maintaining customer confidentiality. The company's managing director will regularly provide a report on customer relations to the Executive Committee and the Board of Directors.

AIM

AIM has managed customer relationships in accordance with the strategy of developing a marketing business that focuses on responding to customer needs and being customer-centric. The company is in the process of studying customer relationship management to create a comprehensive operational guideline to respond to customer needs sustainably.

Value Chain Management

Value Chain Management

Value chain management is a crucial strategy in conducting sustainable business operations. Comprehensive value chain management and integration of a sustainable development approach can contribute to efficient procurement of high-quality products or services for customers or consumers. As a result, the Group is committed to improving overall value chain management with environment, society, and governance and economy in mind. Additionally, the Group prioritizes managing supplier risks in the value chain to ensure that it can deliver the best quality of products and services to customers to achieve the highest level of satisfaction, respond to the expectations of stakeholders, and reduce business interruption risk due to economic, social, or environmental factors within the value chain, especially from the Company's suppliers

TTA

TTA is committed to sustainable business growth and its responsibilities to communities, societies, and the environment. The Company believes that sustainable success is based on responsible business operations throughout the value chain. To ensure that business operations comply with the sustainable development policy, laws, and related regulations, the Company established a Supplier Code of Conduct to encourage all suppliers to collaborate in developing society and environment.

Supplier Code of Conduct

TTA demonstrates its focus on supplier management through the creation and implementation of the Supplier Code of Conduct, as well as procurement and supplier selection practices and guidelines that align with the Company's strategy.

TTA's Supplier Code of Conduct considers environmental, social, along with governance & economic factors in business operations. All suppliers are required to sign an acknowledgement of the Supplier Code of Conduct and consent to allow the Company to evaluate a production procedure and service quality to ensure compliance with the evaluation criteria. Moreover, the internal audit process will also be performed for affiliated companies to ensure that all suppliers comply with the Company's determined principles and guidelines.

Supplier Code of Conduct: https://www.thoresen.com/en/corporate-governance/corporate-policy-documents
Supplier Code of Conduct Guidelines
  1. Conduct a procurement by considering cost efficiency and effectiveness in terms of quality, price, and service for the best interest of the Company.
  2. Conduct a procurement by focusing on business ethics, avoiding any exploitation of suppliers, ensuring transparent and comprehensive communication, providing equal treatment towards all suppliers, and considering their opinions and suggestions.
  3. Conduct a procurement with transparency, impartiality, and traceability and adhere rigorously to applicable regulations and laws, as well as implementing sound risk management and internal control practices.
  4. Conduct a sustainable procurement and supplier management by considering environmental impact, social responsibility, and governance & economic (ESG). It also implements monitoring of suppliers to ensure compliance with the Supplier Code of Conduct, which is a part of sustainable value chain management.
Green Procurement Management Process
  1. Procurement officers must use resources efficiently to achieve maximum benefits and environmental friendliness.
  2. Consider products and services with no environmental impact.
  3. Encourage the use of products made with renewables and do not pollute the environment, such as ecolabels-certified products.
  4. Consider suppliers and service providers with environmental certifications.
  5. Establish fairness and equality in procurement procedures and methods.
Selection of the Company’s Suppliers

When goods and services are required to be procured, the procurement officer will select a supplier from the approved supplier list according to the procedures and guidelines described below:

  1. Provide clear and adequate information about the product and/or service requirements to each supplier who meets procurement qualifications, so that qualified suppliers can offer equivalent products and/or services.
  2. The first step of the new supplier selection process adheres to the principle of considering product and/or service quality, reasonable pricing, and other relevant requirements. To be considered for approval in the next stage of the procurement process, new suppliers who pass the first step must prepare a self-assessment form covering aspects of their products and services, business operations, social responsibility, and environmental responsibility.
  3. The procurement officer evaluates self-assessments from suppliers together with the quality of the products and/or services, price, and other relevant requirements.
    • A score of more than 70 percent is considered as pass, and the results will be presented to the approving authority.
    • A score of less than 70 percent is considered as underqualified. The procurement officer will notify such supplier and jointly formulate guidelines to prevent issues that may affect the Company's sustainability, then reconsider in the next assessment round.
  4. Approved suppliers will be assigned a status of Critical Tier 1 or -Critical Non-Tier 1, based on the criteria for supplier segmentation.
  5. After joining the approved supplier list, the existing suppliers must complete a Yearly Performance Evaluation using the Company's supplier assessment form and the supplier's self-assessment form. This evaluation covers products and services, business operations, social responsibility, and environmental responsibility to monitor performance. Furthermore, during the year, the Company can file and address complaints and issues related to resource use, or environmental, social, or governance & economic concerns. The Company will investigate the facts, determine corrective actions, provide advice, and collaborate to increase supplier's potential together with related parties from all departments and suppliers before reassessing the situation.
Criteria for Supplier Segmentation

The Company has set out supplier segmentation criteria, which enables the Company to systematically analyze and formulate procurement strategies. The criteria that will be considered as part of effective risk assessment related to suppliers are as follows:

1. Critical Tier 1 Supplier

Suppliers with high contract values, high spending orders, difficult-to-replace materials, critical to the manufacturing process, importance to business performance, and are at significant or high risk. The Company requires this group of suppliers to pass the Yearly Performance Evaluation using the Company’s supplier assessment form together with the supplier’s self-assessment from and/or onsite audit. This evaluation process covers products and services, business operations, social responsibility, and environmental responsibility

2. Critical Non-Tier 1 Supplier

Suppliers with a medium level of order or low contract value, as well as a medium or low-risk exposure to business performance. The Company requires this group of suppliers to pass the Yearly Performance Evaluation using the Company’s supplier assessment form together with the supplier’s self-assessment form and assessment from relevant department(s). This evaluation process covers products and services, business operations, social responsibility, and environmental responsibility.

Supplier Risk Assessment

The key factor for enhancing the efficiency of value chain management is the risk assessment procedure. Initially, the Company has a supplier risk management system consisting of value chain risk assessment, the Company’s supplier assessment form, and the supplier’s self-assessment form, in order to identify important suppliers in the value chain and to check the qualifications of those who will be registered as suppliers of the Company. Details of each issue are as follows:

  1. Economic risk issues, such as raw material price fluctuation, et cetera.
  2. Environmental risk issues, such as greenhouse gas emissions, noise pollution, water usage and wastewater discharge, energy consumption, and waste management, raw materials, or equipment containing hazardous substances, et cetera.
  3. Governance risk issues, such as corruption, tax evasion, fair competition, intellectual property rights, et cetera.
  4. Social risk issues, such as human resource management, human rights, occupational health and safety, and compliance with law and regulations, et cetera.
Performance in 2023
Total suppliers 51
Types of Suppliers
Supplier
New Supplier 1
Critical Tier 1 Supplier 18
Critical Non-Tier 1 Supplier 19
Environmental, Social, and Governance & Economic (ESG) Risk Management
Number of suppliers undergoing risk assessment 2
Number of suppliers assessed with high-risk 0
Number of suppliers receiving on-site ESG audit 0
Number of suppliers with risk management for impact mitigation 0
Supplier Average Credit-Term
  • Supplier Credit-Term according to Supplier Code of Conduct is within 30 days
  • Actual supplier average credit-term in 2023 was 30 days

TTA

In 2023, the Company collaborated with State Service Company Limited, a provider of cleaning services for its headquarters, to enhance sustainable business practices among its supplier. This collaboration involved an organizing training session under the Safety Talk project. The objective was to promote occupational safety and health for the supplier, ensuring the cleaning staff could carry out their work with care and consideration for safety and reduce the risk of accidents while working on the Company's premises. The knowledge gained from these training sessions will serve as the foundation for ensuring safety and occupational health standards for the cleaning staff in the future.

All cleaning staff attended the training, representing 100 percent of the total number of cleaning personnel. Pre- and post-training tests were administered, with 100 percent of the participants passing the assessments. Furthermore, in 2023, there were no reported cases of accidents involving cleaning staff while on duty.

TTA
TTA

Thoresen Shipping

Thoresen Shipping relies on value chain management as the foundation of business operations in order to drive business competitiveness and improve operational efficiency. The company is dedicated to establishing supplier selection criteria that are in line with globally recognized maritime standards, guaranteeing quality and timely delivery of services. Thoresen Shipping has established guidelines for dealing with suppliers who do not adhere to the agreement.

PMTA

PMTA adheres to sustainable growth and takes into account all groups of the stakeholders in the value chain. PMTA’s main subsidiary, Baconco, is one of the market leaders in Vietnam’s agrochemical industry. Baconco’s STORK trademark is widely recognized and renowned for its product quality. Baconco selects overseas suppliers that are well-known for their quality and credibility in order to import the raw materials with higher quality than local suppliers in Vietnam to use in its production process. Baconco also conducts domestic marketing campaigns by organizing small meetings, seminars and events which target different types of customers for different purposes. For example, Baconco organizes small meetings with farmers mainly to advise them on suitable fertilizers to use and to also provide Baconco’s product knowledge and introduce other products. The activities also allow Baconco to gain insights, informative feedback, and recommendations from the customers

PHC

PHC operates under the Yum! Brands, Inc. (Yum!) franchise, which has policies and requirements based on international standards. The company is committed to responsibly and continually managing risks within the value chain.

  1. Food Safety Audit is a comprehensive audit of specific food safety and hygiene requirements.
  2. Quality System Audit is an audit of production efficiency of products and quality control system of suppliers.
  3. Distribution Audit is the inspection of warehouse quality, and storage standards to ensure compliance with product type requirements, prevention of contamination during storage, and quality inspection of product shipments that are transported under the requirements of such goods, including temperature, cleanliness of the car, the hygiene of the carrier, the process of loading and unloading goods, et cetera.
  4. Packaging Audit is an audit that covers the safety requirements of packaging that comes into contact with specific foods.
  5. Global Food Safety Initiative (GFSI) Certification is an international standard with the purpose of establishing standards on food safety and hygiene. If a supplier has established a system of quality standards and obtained a GFSI Assessment result that meets PHC’s requirements, the supplier may use such document to waive PHC’s standard audit.

PHC places utmost importance on efficient value chain management because the food business involves numerous suppliers. The goal is to fulfill customer demands concerning quality and pricing while minimizing cost risks throughout the value chain. These include challenges such as material shortages and environmental, social, and governance & economic risks associated with suppliers. PHC has established guidelines focused on ethical and transparent procurement practices, aligned with company regulations. This involves sourcing from socially and environmentally responsible suppliers, as the quality and safety of products delivered to customers depend on the quality of raw materials, standardized production processes, and systematic product storage and distribution. Additionally, PHC implements operational strategies to ensure efficiency and suppliers' compliance with PHC's policies. Each year, critical component suppliers are grouped based on their strategic importance in influencing business operations. External assessors conduct annual factory inspections and risk evaluations for both Critical Tier 1 and new suppliers. Measures are in place in case suppliers fail assessments, and annual training sessions are conducted with them, covering food safety standards, quality systems, packaging safety, and warehouse and transportation safety. Furthermore, regular visits to key suppliers' factories and production processes are conducted, and sustainable development opportunities are explored with all Critical Tier 1 suppliers to review business models. Various aspects, such as environmental, social, and governance & economic factors, that may impact future business operations are considered during these reviews.

Besides, PHC encourages its suppliers to comply with the Supplier Code of Conduct and the supplier guidelines, which outline environmental, social, and governance & economic practices. In 2023, the company communicated the Supplier Code of Conduct and guidelines to all new suppliers and planned to extend them to all suppliers.

UMS

UMS established procurement standards for coal selection and import that involves quality assurance by a team of experts and professionals. The inspection qualifications that the supplier must meet includes carbon content, humidity content, sulfur dioxide content, and quantity of reserve coal. In addition, the company also specifies the standard for the domestic and international delivery processes to fully cover coals in an appropriate condition during transportation. In terms of international suppliers, a procurement process has been set out to select a reliable and standardized transportation provider. The service provider must import coal in compliance with legal and customary formalities. In 2023, however, the company did not import coal from international mines. Additionally, the company provides pre- and post-sales consultation and service to customers through its customer service team.

AIM

With a strong commitment to long-term growth and sustainable development, the company has developed strict and equitable guidelines for selecting suppliers who meet the Waterworks Authority standard to maintain the quality of service. To encourage the core sustainable long-term value, the company always prioritizes selecting suppliers who share the same goal of being environmentally friendly. Therefore, the company is in the process of studying the potential of value chain management with all groups of suppliers to grow sustainably together.

Cybersecurity and Data Privacy

Cybersecurity and Data Privacy

As technological advancement is being developed and transformed at an accelerating rate, cybersecurity and personal data protection are therefore critical to the business. The Group relies on technology to operate more efficiently and reduce potential risks, while broadening the scope of business capabilities to achieve long-term success. Furthermore, the evolution of cyber threats has become increasingly complex. Potential risks to data privacy and cybersecurity include computer viruses, hacking, ransomware, online data infringements, and the loss or leak of confidential data, both in terms of product and service development and personal information of stakeholders. As a result, a cyber-attack may have a negative impact on the Group in both monetary and non-monetary forms, such as a civil penalty, loss from ransom redemption, negative impact on reputation, loss of income or profit, and customer churn due to lower confidence in the Company’s reputation and image.
Cyber Security and Data Privacy

TTA

To ensure oversight of governance in terms of information technology, innovation, and IT risk management, the Company appointed the Board of Directors who is entitled to monitor IT governance, innovation, and IT risk management to be aligned with applicable laws and standards. Additionally, they have duties in considering the policies and procedures relating to cyber and IT risk management and mitigation by integrating with organization risk management, which covers identification of business risks or opportunities, assessment, and prioritization, determination of management plan, monitoring and reporting, and annual review of the Information and Cyber Security Management Policy in accordance with the principles of good corporate governance.

Information and Cyber Security Management Policy

Increasing technology adoption may result in information technology risks. It is therefore critical that all users comply with the Company’s policies regarding the Computer Crimes Act, B.E. 2007, as a standard to protect organizations and block abusive users. Furthermore, The Company shall collect personal data as is necessary to the Company’s objectives and depends on the relationship or activities that the data subject has with the Company or the type of product or service that the data subject uses as previously informed. Before or during the collection of personal data, the Company shall obtain the data subject's explicit consent. The current version of the Information and Cyber Security Management Policy is available on the Company website (https://www.thoresen.com/en/corporate-governance/corporate-policy-documents )

Management Plan and Approach to Cybersecurity and Data Privacy

The Company collects and preserves personal data according to the purposes, scope, lawfulness, and fairness required to carry out the Company's operational activities, which can be classified as follows;

Management Plan

The Company formulated information access control and prevention regulations for the appropriate use of information resources and management of personal data security in order to control users' actions to minimize vulnerability and comply with relevant laws. It is implemented through encryption in data transmission over the internet network and restricts access to personal data, both in paper and electronic forms. Additionally, the Company has prepared a suitable backup system in accordance with the Backup and Recovery Best Practice Standard, which covers scope, storage media, as well as data backup and connection frequency. As a result of the rapid changes in information technology, the Company has performed an annual review of the relevant policies.

The Company currently relies more on technology to support business operations and product and service development to meet the needs of customers, build competitive advantages, and reduce operating costs. The Company focuses on auditing and risk assessment of cyber security and data privacy, which covers risk identification, assessment, and control to maintain risks within acceptable levels. Moreover, it also includes the establishment of an appropriate risk management and mitigation plan. Furthermore, risk assessment and risk management approaches can be studied from the topic of risk factors in the 2023 Form 56-1 One Report.

Complaint Channels

The following channels are for inquiries or further information about the protection, collection, use, disclosure, or complaints about personal data.

Thoresen Thai Agencies Public Company Limited

26/26-27 Orakarn Building, 8 th Floor, Soi Chidlom,
Ploenchit Road, Kwaeng Lumpinee, Khet Pathumwan,
Bangkok 10330
Telephone: 02-250-0569 to 74

Data Protection Officer

26/26-27 Orakarn Building, 8 th Floor, Soi Chidlom,
Ploenchit Road, Kwaeng Lumpinee, Khet Pathumwan,
Bangkok 10330
Telephone: 02-250-0569 to 74
Email: dpotta@thoresen.com

Cybersecurity and Data Privacy Performance
Cybersecurity and data privacy training participation in 2023 (percentage)
Board of Directors
100
Management
100
Employees
72
Number of cyber-attack cases in 2023 0
Number of data leak cases in 2023 0

The Company communicates personal data protection and cybersecurity information to employees through pop-up screens and internal portal system, enabling employees to access and study the materials at their convenience.

Cyber Security
Cyber Security
Cyber Security
Cyber Security

In 2023, the Company initiated a project aimed at strengthening cybersecurity knowledge by conducting tests using phishing email attacks.

  • Objective: The objective is to equip employees with the skills to anticipate and effectively respond to fraudulent email threats, thereby minimizing the risk of falling victim to phishing attacks. Additionally, the project seeks to enhance employees' understanding and awareness of fraudulent emails.
  • Project goal: The project aims to ensure that no employee falls victim to fraud within two years from the project's inception.
  • Implementation period: The project commenced in 2023 and involved repeated testing, with variations in attack styles, until no employee fell victim to the phishing attempts.
Results of the first Phishing Email Attack Testing Project in 2023
Total Participants
32
Participants who passed the test
16
Participants who failed the test (fell victim)
16
Participants who failed the test but passed the Email Phishing course
30

Since the project commenced in December 2023, the results of additional testing are not included in this Sustainability Report.

Thoresen Shipping

Proper use of information systems and software results in more efficient business operations. Thoresen Shipping focuses on and is committed to ensuring cybersecurity and data privacy in accordance with the Computer Crimes Act of 2007. The company has established an IT Policy, a Data Privacy Policy, and a Cookie Policy in order to provide appropriate management direction for the prevention and security of Personal Data.

Management Plan and Approach to Cybersecurity and Data Privacy

Thoresen Shipping provides and implements appropriate management and technical measures to protect and retain personal data through encryption in personal data transmission over the internet network and control access to personal data limited only to the relevant person(s). In addition, the company also formulated safeguard measures in accordance with applicable laws and enforcement. The access, usage, and disclosure are strictly restricted solely to responsible person(s), whether in hard copy or electronic form.

Complaint Channels

The following channels are for inquiries or further information about the protection, collection, use, disclosure, or complaints about personal data:

Thoresen Shipping Singapore PTE. LTD

Contact Place: 127A TELOK AYER STREET
SINGAPORE (068596)
Telephone: +65 6578-7000
.

Personal Data Protection Officer

Contact Place: 127A TELOK AYER STREET
SINGAPORE (068596)
Telephonae: +65 6578-7000
Email: dposhipping@thoresen.com

PHC

PHC prioritizes cybersecurity and customer rights in accordance with applicable laws and human rights. The company established a Cybersecurity policy to guide the management and maintenance of cybersecurity. This includes communicating the policy and raising safety awareness among involved internal and external parties to protect the privacy of customers. The company's Managing Director is responsible for cybersecurity management, which includes risk assessment, development of appropriate security measures, and promotion of implementation across the organization. Moreover, PHC developed a contingency plan to manage the organization's continuity and prevent potential impacts from system failures or severe information technology damage to ensure timely recovery. In case of a problem, a customer can communicate through every channel of Pizza Hut.

Complaint channels
  • Call Center : 1150
  • Website : www.pizzahut.co.th
  • Mobile Application : Pizza Hut Thailand
Issue Operational plan for the year 2023 Operational plan for the next 1-3 years
Overview of data security/cybersecurity management Established an IT Security Policy to serve as a guideline for cybersecurity practices and conducted training sessions for employees to raise awareness about the importance of security implications to the organization. Announce the enforcement of the IT Security Policy to inform employees about its guidelines for work and utilize it for training new hires. Additionally, schedule training sessions every 3 months.
Annual data privacy and cybersecurity maintenance, such as cybercrime prevention measures Conducted audits and assessments of vulnerabilities, weak points, and access permissions to databases and data reports, internally and externally, in addition to taking measures to address these vulnerabilities to prevent and mitigate risks. Conduct an annual Penetration Testing by external companies to minimize vulnerabilities to zero.
Projects supporting data privacy and cybersecurity Performed IT Control reviews annually according to the requirements set by external assessment agencies, covering:
  • Server Room Control
  • Server Access Control
  • Application Access Control
Assign access rights to information to specific agencies or individuals authorized to access such data, in order to prevent information leakage. Joint training sessions with the HR department will also be organized every 3 months.
Risk assessment procedures concerning data privacy and cybersecurity, including relevant standards such as ISO 27001 and PDPA Implemented PDPA compliance in all channels of the Company, ensuring customers were informed about their personal information and the rights granted to the Company. Additionally, the Company took great care in protecting customer information and conducted training sessions on customer information disclosure and use for employees. Establish core cybersecurity standards to fortify the organization and mitigate data theft risks. Additionally, ensure server data backup outside the Company or establish a Disaster Recovery Site and Disaster Recovery plan, including an annual Disaster Recovery plan rehearsal schedule.
Research and Innovation Development

Research and Innovation Development

At present, the digital world and technology are changing rapidly, leaving impacts on business operations and consumers' lifestyles. The rapid change in customer needs and society results in increasing competition and greater challenges. Thus, innovation becomes a crucial factor in driving business to enhance the Group's capability to adapt and keep up with the changing world.

Research and Innovation

According to the corporate value, the Group aims to be excellent in adopting and applying new concepts or practices to implement with responsibility, creativity, and readiness to work, while striving to promote innovation that adds value to the business in response to constantly changing environmental factors. By fostering an environment that encourages innovation, it results in effective and efficient organizational performance. The Company continually establishes research and development strategies that are aligned with business direction and goals with an aim to improve and expand the main business and, in turn, promote growth and sustainability. This encompasses innovation in working processes, new business models, as well as collaboration with suppliers in the value chain. Furthermore, the Company is prepared to adopt new technology and future changes to meet the changing demands of customers, enhance a competitive capacity, build customer trust, expand customer base, and differentiate from competitors.

The Company is dedicated to promoting innovation that adds value to the business in response to constantly changing environmental factors.

Research and Innovation

TTA

TTA places emphasis on innovations and investments that reduce environmental impact, conducting business with a focus on sustainability.

Thoresen Shipping

Thoresen Shipping has developed an online learning system to develop new working skills among crew through an e-learning information system from internal and external experts. The knowledge provided will cover various areas, including general knowledge, management, seamanship, maintenance, and safety management for life, property, and the environment. Additionally, the system will provide knowledge of updated technologies, data analysis, and other aspects to advance work management.

PHC

Improvement Process

PHC developed the Smart Workflow & Document Management system, an internal program designed to streamline employee travel expense reimbursement (e-request), approval (e-approval), and document storage in PDF format (e-storage) online. This system enhances convenience, increases processing speed, and significantly reduces paper usage by eliminating the need for printed documents.

Spend Smarter Project

The Spend Smarter Project aimed to explore innovative approaches to cost reduction within the supply chain. Collaborating closely with suppliers, the company conducted feasibility studies and identified strategies to minimize production expenses while upholding product quality and quantity. These strategies included increasing the size of raw material packaging to decrease the expenses associated with utilizing numerous small packages. Additionally, the project involved discontinuing the sale of PET bottled soft drinks and transitioning to beverage packaging sourced from suppliers that adhere to international quality standards, ensuring product safety, while prioritizing customer convenience in terms of usage.

Development and Improvement of Raw Material Innovation for Pizza Dough-Making

Yum! Brands Inc. has developed an innovative pizza dough raw material, known as the One Dough System, designed for pizza dough production, extending its shelf life and minimizing losses incurred from discarding leftover flour due to expiration. This inventive dough also maintains consistent quality over time. Moreover, it facilitates the production of various pizza types, streamlining the dough-mixing process and allowing employees to manage their work schedules more efficiently. Consequently, it reduces morning workload time.

Pizza Hut Delivery Unites to Utilize Electric Motorcycles

By prioritizing sustainable business practices and contributing to society, Pizza Hut is committed to Environmental, Social, and Corporate Governance (ESG) principles, aligning with global trends aimed at reducing pollution. In a pioneering move within the food delivery industry, Pizza Hut has established a new standard by partnering with rider groups to utilize electric motorcycles for food delivery, promoting the concept of 'Eco-friendly Delivery.' This initiative reflects Pizza Hut's dedication to supporting environmental consciousness and the use of clean energy. The adoption of electric vehicle (EV) technology as part of this initiative serves as a pilot program to mitigate carbon dioxide emissions and reduce greenhouse gases, furthering Pizza Hut's sustainability objectives in Thailand.

Pizza Hut Delivery

PHC has selected the P80 Go electric motorcycle brand for its suitability for its riders, considering both performance and endurance. These motorcycles boast various features, including a top speed of 100 kilometers per hour, alleviating the strain on riders amidst rising fuel prices. However, a challenge arises from the limited availability of electric vehicle charging stations, coupled with the time-consuming nature of battery charging. To address this issue, PHC has entered into a strategic partnership with P80 Go to enhance the efficiency of electric motorcycles. This collaboration includes exploring options such as expanding electric battery charging stations or introducing electric battery swapping stations (Swap & Go) to ensure coverage and offer convenience and efficiency for Pizza Hut riders.

Pizza Hut Thailand on App Store and Google Play

PHC has developed a mobile application to provide customers with an additional pizza ordering channel available on both the App Store and Google Play. Following the launch of the application, PHC has received positive feedback from customers and seen an increase in sales.

Dowload App Pizza Hut

STC

Taco Bell celebrates the opening of its new branch featuring the use of upcycled containers for the first time at the Bangchak Gas Station, Ramintra Km. 6.5 Branch.

The newly opened Taco Bell branch at Bang Chak Gas Station, Ramintra Km. 6.5, introduces an innovative approach by upcycling used containers to form the main structural element for the first time. This method paves ways toward sustainability, offering cost and time-saving benefits. Container construction significantly reduces waste compared to traditional methods, facilitating convenient and swift relocation if needed, with minimal waste generated during the process. Moreover, this model enables STC to establish stores in constrained spaces while also contributing to job creation in the Ramintra branch area and fostering economic growth in nearby communities.

Taco Bell
Enterprise Risk and Crisis Management

Enterprise Risk and Crisis Management

Currently, business operations are faced with constant changes and risks in the environment, social, and governance & economic aspects. Simultaneously, a business operational precedence on the environmental, social, and governance & economic impacts can reflect the Company's long-term stable and sustainable business operations. This highlights a challenge to effective risk management and business continuity planning. Therefore, a preparedness of effective management can support the Group in dealing with critical risks and uncertainties affecting business operations. It is crucial to ensure that the Company can achieve strategic goals and business objectives while creating value and confidence among all groups of stakeholders.

Crisis Incident
Management Approach

The Company has raised employee awareness of sustainability risk management principles and effectively integrated these principles into business operations. The Board of Directors has been given ultimate responsibility for overseeing and managing the overall risk management process, working in collaboration with the risk owner(s) and the Risk Management Committee. The Company has a comprehensive strategy for managing risk and crisis as follows.

Enterprise Risk and Crisis Management Performance in 2023

The Company and subsidiaries’ risk assessment and risk management approach can be studied from the topic of risk factors in the Form 56-1 One Report.

  •  Sustainability or non-financial risk issues in 2023 and mitigation plan include:
    • Safety, occupational health, and environment
    • Climate change, natural disasters, and natural disaster risk
    • Environmental impact
    • Human rights impact
    • Community relations and social responsibility
    • Corruption
    • Changes in regulations and laws related to business operations
  • Number of personnel who have received sustainability risk management training
    Level 2023
    Person Percentage
    Board of Directors 4 36
    Executives 72 100
    Employees 13 72
  • Management result of sustainable risk that has been assessed in 2023
    Management result of sustainable risk