Governance Initiatives

[GRI 415-1 (2016)]

The company abides by the applicable laws on lobbying interests in accordance with: Republic Act No. 1827 “An Act to Regulate Lobbying in the Congress of the Philippines and in the Commission on Appointments”, Republic Act 11232 “Act Providing for the Revised Corporation Code of the Philippines” and the Omnibus Election Code of the Philippines. 

The company prohibits the influence of any legislators or committees of Congress to pass or defeat legislation that may benefit or favor the company, in exchange for money or property. The company, in its conduct of business, does not provide any monetary contributions for the following activities:

• Political campaigns, ballot measures, or referendums.
• Political organizations whose role is to influence political campaigns or legislative activities
• Policy Lobbying Groups.  
  

With the company's growing needs, AboitizPower ensures that it partners with suppliers who deliver products and services effectively, prioritize sustainability, and implement responsible business practices. In 2021, the company released its Supplier Code of Conduct (SCOC), which aims to align supplier practices with AboitizPower’s values and strengthen standards for conducting business.

The Code ensures all suppliers uphold and share the same values and sustainability principles when engaging with AboitizPower. It also requires adherence to the company’s standards on compliance, ethics, social responsibility, labor practices, environmental stewardship, and quality.

AboitizPower encourages suppliers to cascade these same sustainable standards and commitments throughout their supply chains.

Safety Banding Assessment

AboitizPower is committed to ensuring that Safety, Health, and Environmental (SHE) standards are upheld and that its supply chain does not negatively impact the environment. This commitment is demonstrated through the company’s Safety Banding Assessment, in which potential and current suppliers are evaluated based on their adherence to SHE practices and the accuracy of the information they provide.

Based on the results, suppliers are classified into three categories—green, amber, and red—reflecting their compliance with SHE standards. This assessment process is integrated into AboitizPower’s existing Supply Chain Management (SCM) accreditation framework and supports the implementation of the Contractor Safety Management System (CSMS).

Supply Chain Metrics

In 2024, AboitizPower had a total of 2,225 suppliers, with 250 being classified as critical suppliers.

AboitizPower (“the Company”) is fully committed to safeguarding the Philippines’ energy infrastructure. We recognize that delivering reliable power goes hand in hand with protecting the digital systems that support our operations, from corporate technology to the critical control systems that help ensure energy for Filipino homes, communities, and businesses.

Our Cyber and Information Security Program is designed to protect both Information Technology (IT) and Operational Technology (OT) environments from evolving threats. This includes ensuring the confidentiality, integrity, and availability of our systems, in alignment with national cybersecurity regulations and mandates from energy regulating bodies.

Through continuous improvements, we work to strengthen defenses, manage security risks, and enhance resilience across all levels of the organization. Our key priorities include:

• Establishing security policies and controls for both IT and OT environments to ensure comprehensive protection.
• Designating a dedicated Chief Information Security Officer (CISO) and specialized teams to lead security initiatives.
• Continuously identifying and addressing vulnerabilities to reduce risks to critical systems that support the Company's operations.
• Proactively manage cyber and information security incidents to enhance resilience against internal and external threats.
• Maintaining robust and adaptive security processes to ensure operational continuity and rapid response to evolving risks.
• Designing, implementing, and maintaining a secure architecture for IT and OT systems, embedding ‘Secure by Design’ principles at every layer.
• Fostering employee engagement through targeted security awareness programs that emphasize the importance of protecting company data and systems.
• Upholding data privacy in full compliance with applicable regulations, including the Data Privacy Act of 2012.
  Conducting regular audits and assessments to strengthen and refine the security program.
  

Security is a shared responsibility, and by embedding it into key aspects of our operations, we help ensure the reliability of energy assets that are essential to national development.