Risk management, as it has been understood and practiced in the voestalpine Group, serves to ensure both the continued long-term existence of the Group and an increase in its value, thus representing a key factor in the success of the Group as a whole.
Since the business year 2000/01, the voestalpine Group has had a comprehensive risk management system in place that was established based on a general, Group-wide policy; this policy has been updated and expanded on an ongoing basis.
In accordance with the Austrian Company Law Amendment Act of 2008 (Unternehmensrechts-Änderungsgesetz) and the associated increased importance of an internal control system (ICS) and a risk management system, an Audit Committee has been set up at voestalpine AG, which addresses questions related to risk management and the internal control system (ICS) on an ongoing basis as well as the monitoring thereof. Both the risk management and the internal control systems are integral components of the existing management systems within the voestalpine Group. The Internal Audit department independently monitors operational and business processes and the ICS and, as an independent, in-house department, has full discretion when reporting and assessing audit results.
The systematic risk management process assists management in recognizing potential risks early on and initiating appropriate action to avert or prevent dangers. As is proper in value-oriented corporate management, risk management is an integral part of the business processes; it covers both the strategic and the operational levels and is therefore a major element in the sustainable success of the Group.
Strategic risk management serves to evaluate and safeguard strategic planning for the future. Strategies are reviewed to ensure conformity with the Group’s system of objectives in order to ensure value-adding growth by way of an optimum allocation of resources.
Operational risk management is based on a revolving procedure (“identify and analyze, assess, manage, document, and monitor”) that is run at least once a year uniformly across the entire Group. The evaluation of identified risks is implemented using an evaluation matrix comprising nine fields that assesses possible losses and the probability of occurrence. The main risks being documented are operational, environmental, market, procurement, technological, financial, compliance, and IT risks. This process is aided by a special web-based IT system.
The preventive measures for the main risk areas presented in last year’s Annual Report are still valid:
Availability of raw materials
In order to ensure the supply of the required quantity and quality of raw materials and energy, the voestalpine Group has for some years maintained an appropriately diversified procurement strategy that is required due to the increased risks encountered in the recent past (mine closures, capacity adjustments, uncertainties associated with the energy transition or energy paradigm shift). Long-term relationships with suppliers, the expansion of the Group’s supplier portfolio, and the development of its self-sufficiency are the core elements of this strategy, which is becoming increasingly important in view of the trend toward higher volatility on the raw materials and energy markets, and will continue to determine the company’s actions. (For more details, please refer to the “Raw Materials” chapter of this Annual Report).
Guidelines for hedging raw materials price risk
CO2 issues
Failure of IT systems
Failure of production facilities
Knowledge management
Risks in the financial sector
Financing risks are hedged using the following measures: