Governance Initiatives

[GRI 415-1 (2016)]

The company abides by the applicable laws on lobbying interests in accordance with: Republic Act No. 1827 “An Act to Regulate Lobbying in the Congress of the Philippines and in the Commission on Appointments”, Republic Act 11232 “Act Providing for the Revised Corporation Code of the Philippines” and the Omnibus Election Code of the Philippines. 

The company prohibits the influence of any legislators or committees of Congress to pass or defeat legislation that may benefit or favor the company, in exchange for money or property. The company, in its conduct of business, does not provide any monetary contributions for the following activities:

• Political campaigns, ballot measures, or referendums.
• Political organizations whose role is to influence political campaigns or legislative activities
• Policy Lobbying Groups.  
  

With the company's growing needs, AboitizPower ensures that it partners with suppliers who deliver products and services effectively, prioritize sustainability, and implement responsible business practices. In 2021, we released our Supplier Code of Conduct (SCOC), which aims to align supplier practices with our values and strengthen standards for conducting business.

The Code ensures all suppliers uphold and share the same values and sustainability principles when engaging with AboitizPower. It also requires adherence to the company’s standards on compliance, ethics, social responsibility, labor practices, environmental stewardship, and quality. Access a copy of the Supplier Code HERE.

AboitizPower encourages suppliers to cascade these same sustainable standards and commitments throughout their supply chains.

Safety Banding Assessment

AboitizPower is committed to ensuring that Safety, Health, and Environmental (SHE) standards are upheld and that its supply chain does not negatively impact the environment. This commitment is demonstrated through the company’s Safety Banding Assessment, in which potential and current suppliers are evaluated based on their adherence to SHE practices and the accuracy of the information they provide.

Based on the results, suppliers are classified into three categories—green, amber, and red—reflecting their compliance with SHE standards. This assessment process is integrated into AboitizPower’s existing Supply Chain Management (SCM) accreditation framework and supports the implementation of the Contractor Safety Management System (CSMS).

Supply Chain Metrics

In 2025, AboitizPower had a total of 2,360 suppliers, with 236 being classified as critical suppliers.

AboitizPower (“the Company”) is fully committed to safeguarding the Philippines’ energy infrastructure. We recognize that delivering reliable power goes hand in hand with protecting the digital systems that support our operations, from corporate technology to the critical control systems that help ensure energy for Filipino homes, communities, and businesses.

Our Cyber and Information Security Program is designed to protect both Information Technology (IT) and Operational Technology (OT) environments from evolving threats. This includes ensuring the safety, confidentiality, integrity, and availability of our systems, in alignment with national cybersecurity regulations and mandates from energy-regulating bodies.

Through continuous improvements, we work to strengthen defenses, manage security risks, and enhance resilience across all levels of the organization. Our key priorities include:

• Establishing security policies and controls for both IT and OT environments to ensure comprehensive protection.
• Designating a dedicated Chief Information Security Officer (CISO) and specialized teams to lead security initiatives.
• Continuously identifying and addressing vulnerabilities to reduce risks to critical systems that support the Company's operations.
• Proactively manage cyber and information security incidents to enhance resilience against internal and external threats through the conduct of regular tabletop exercises across all key business functions of the Company.
• Maintaining robust and adaptive security processes to ensure operational continuity and rapid response to evolving risks.
• Designing, implementing, and maintaining a secure architecture for IT and OT systems, embedding ‘Secure by Design’ principles at every layer.
• Fostering employee engagement through targeted security awareness programs that emphasize the importance of protecting company data and systems.
• Our comprehensive third-party risk management program ensures that every partner we work with meets our standards for data privacy, regulatory compliance, and operational resilience.
• Conducting regular audits and assessments to strengthen and refine the security program.
  

Security is a shared responsibility, and by embedding it in key aspects of our operations, we help ensure the reliability of energy assets essential to national development.