GC One Report 2023 [EN]

in coordination with GRC personnel and for providing recommendations for rectifying any internal control def iciencies. Any detected deficiencies must be reported to executives for acknowledgment in a timely manner, and the remediation progress is monitored to ensure that the issue is resolved within the specified timeframe. In 2023, the Company initiated Control SelfAssessment (CSA) Prioritization, categorizing processes in accordance with corporate risks and significant risks affecting internal control. This approach ensures that risk and internal control assessment at the process level are efficient, appropriate, and aligned with organizational objectives, in accordance with internal control principles. The Internal Audit Unit, an independent unit reporting directly to the Audit Committee, is in charged with conducting audits to ensure the adequacy appropr iateness and consistent implementation of GC’s internal control and evaluating the effectiveness of the internal control in various activities according to the audit plan, which has been approved by the Audit Committee and is in line with GC’s strategic direction and key risks that may affect the operation. The Internal Aud i t i s a l so r espons i b l e f o r p r ov i d i ng recommendations related to internal control to executives, who then prescribe rectification as instructed and report the audit results to the Audit Committee on a regular basis. Internal controls for financial reporting are reviewed by external auditors, who report to the Audit Committee quarterly and yearly. GC advocates the adoption of technology in monitoring and evaluating internal control, as well as in automated audit. For instance, GC has implemented detection rules in significant work processes to identify irregular transactions and inspect items for potential conflicts of interest. Additionally, the Company has organized expense data into a visualized dashboard and established monitoring processes for transactions that could be susceptible to fraud and corruption. GC has continuously monitored and reported compliance performance through assessments and by compiling laws, rules, and regulations relevant to GC’s operations, known as the compliance universe, which serves as a database and guideline for process owners. In 2023, GC established a Compliance Management System according to ISO 37301 standards to monitor compliance with laws and regulations and to enhance the efficiency of compliance risk management. GC has been certified as a member of Thai Private Sector Collective Action Against Corruption (CAC) and continuously recertified every 3 years since 2014. GC has also appointed an anti-corruption working group to review and recommend the anti-corruption assessment and Measure. In addition, GC actively encourages i ts group companies to undertake corruption risk assessment and establish policies as well as a sufficient and efficient internal control system. GC also supports its business partners in joining the declaration of intent to become members of CAC. GC recognizes and pl aces impor tance on s t rengthening a transparent and auditable business network. 228

RkJQdWJsaXNoZXIy ODg4NTI=