11 Jan 2024

Intertek Core Mandatory Controls ('CMCs') are how we define, monitor and achieve consistently high standards in our control environment throughout the whole organisation. The CMCs are updated annually, reflecting changes in Intertek's systemic risks (risks which are inherent in our operations). The CMCs were updated in December 2023 and communicated to all colleagues via Whatsin, our intranet. The CMCs are comprehensive, setting out Intertek's control framework; there are 295 controls organised under nine themes.

To ensure implementation, and to remain uncompromising on Quality and Compliance in relation to our cyber risk, our IT-related Core Mandatory Controls framework forms the mechanism to define, monitor and achieve consistently high standards. Control and oversight is provided through our CyberSecurity Team, Group Legal & Compliance and the Internal Audit team. We have mandatory training on data security and privacy for all employees and global data breach response processes.