Risk, viability and going concern
continued
Issues identified in certain of the Group’s
principal risks materialised during
2022. The Group’s existing measures in
mitigation were initiated and reviewed to
ensure their continuing effectiveness.
These were most notably:
Business interruption:
In the first half of
the year, considerable work was done on
security of energy resources in the light of
the disruption of the Russian gas supply to
Europe. This focused on plans to ensure
that our European facilities could continue
to operate, and the ability to transfer
production in the event of an interruption
in gas supply. Our business in Ukraine
suffered very significant challenges but
continued to operate to the extent
possible, with the exceptional support of
our people based there. In addition, our
business in China continued to experience
lockdowns related to the COVID-19
pandemic, and addressing these risks was
a clear focus for our regional management
in China.
In January this year, we also suffered an
explosion at our site in South Africa, which
damaged some equipment and required
the instigation of our business continuity
plan to mitigate the impact on our
customers.
End-market risk:
The global economic
outlook deteriorated significantly in the
second half of 2022, with particular
concern indicated for the mature
European economies. The effects of this
did not have a significant impact in 2022
given the sharp focus on the commercial
performance of our Steel and Foundry
Divisions. Whilst the geographic diversity
of our business and our presence in
developing markets stand as robust
mitigation to any regional disruptions
or economic decline, the effects of this
projected global decline continue to
be carefully monitored.
Complex and changing regulatory
environment:
The conflict in Ukraine led
to a significant increase in sanctions and
restrictions relating predominantly to
Russia, imposed by the United Kingdom,
the European Union and the United States.
The Group monitored these developments
closely and using our established internal
team and processes, took steps to assess
and respond to each iteration of these
restrictions as they were imposed.
People, culture and performance:
The
shift in working patterns to more remote
working that come about as a result of the
COVID-19 pandemic continues to be in
place in the majority of our geographies.
Whilst Vesuvius does not have a global
policy in this regard, enabling our
businesses to tailor their approach as
necessary, a concerted effort has been
made to bring our people back to the
physical workplace where possible. This is
considered to be particularly important in
the context of instilling new joiners with
a sense of the culture and values of
Vesuvius, which we believe cannot be
adequately transmitted in fully remote
working structures.
Despite the aforementioned challenges,
the Board did not identify any new
principal risks during 2022 or any overall
material change to the Group’s identified
principal risks and uncertainties, albeit
that within those risks a number of issues
manifested themselves during the year.
As such, the Group’s statement of principal
risks and uncertainties was unchanged in
2022 from 2021.
Cyber security
The Audit Committee and Board receive
regular updates on the Group’s activities in
regard to cyber security, including general
developments and specific actions and
activities within the Vesuvius business.
A comprehensive plan was established
in 2020 to further strengthen Vesuvius’
overall IT security. This was progressed
in 2021 and continued to be the focus
in 2022, with a number of activities
undertaken to strengthen and refine
our systems and controls during the year.
A holistic approach is taken to addressing
cyber challenges, focusing on the
improvement of the Group’s overall IT
infrastructure, procedures and framework.
The Group continues to run regular
training programmes on cyber/IT security.
See page 105 in the Audit Committee
report for further information on the
Group’s approach to cyber security.
2023 cyber incident
In February, the Group was the subject
of a cyber incident involving unauthorised
access to our IT systems. This required the
instigation of the Group’s Cyber Incident
Plan. Our systems were shut down to
contain the incident on a precautionary
basis, and our sites implemented their
business continuity plans to maintain their
operations. The investigation is still
ongoing and the Board continues to
monitor the impact of the incident and
receives regular updates on progress to
address it, including the actions being
taken to mitigate the immediate risk
of further incidents. Going forward,
consideration will be given to any
additional strategic or operational
improvements required to the Group’s
systems and processes, to further reduce
the potential for future attacks and further
improve the Group’s resilience for dealing
with such incidents.
Climate change
The Group’s overall risk management
processes also incorporate consideration
of the potential impact of climate-related
risks on the Group. The Group does
not regard climate change itself to
represent a material stand-alone risk
for the Group’s operations.
Whilst a significant proportion of the
Group’s revenue is generated from steel
manufacture and automotive castings,
industries that are under transition
as a result of their focus on improving
environmental performance, we believe
these changes will be positive for the
Group. The opportunities in the Group’s
business strategy, which is founded on
helping our customers to improve their
manufacturing efficiency and the quality
of their products – and therefore reduce
their climate impact – will play a critical
part in the development of the Group
going forward. We also see potential
benefits for the Group from the
acceleration of the energy transition,
as this will create continued demand for
the high-quality steel produced using
Vesuvius’ products and solutions.
The Group continues to recognise that
climate change could present further
uncertainty for the Group in terms of
increased regulation, the evolution of the
geographical distribution of our customer
base and the costs of meeting more
onerous disclosure requirements.
Further information about the Group’s
consideration of climate-related risks
and opportunities can be found in the
Our planet section on pages 57-65.
The risks we associate with our
sustainability performance and our
end-customers’ sustainability transition –
badged as ESG – are identified as a
separate element of the Group risk
register, recognising the work Vesuvius
can do to mitigate the environmental
impact of our customers’ processes.
Other elements of this risk are
incorporated into the appropriate
principal risk and uncertainty that the
Group has identified. The Group continues
28
Vesuvius plc
Annual Report and Financial Statements 2022