Indra consolidates its risk management culture by certifying its adoption of best practices

Indra, one of the leading global technology and consulting companies, has been recognized by AENOR as a company whose risk control and management system complies with the principles, processes and best practices laid down in the ISO 31000 international standard to ensure optimal governance of any external or internal risk factors, including the management of financial and non-financial risks, including those related to sustainability.

This recognition of corporate-level risk management covers the Indra Group's business activities, including Minsait, in: consulting, services and systems for transportation, defence, energy, industry and consumption, telecommunications and media, financial services and public sector clients.

The technology company has thus solidified its risk management culture across the entire organization, encompassing the management of operational risks and provision of value to the customer.

AENOR, the leading certification body in Spain, stresses that it was able to verify how the reference framework developed with the support of stakeholders and the leadership of senior management allows Indra to integrate risk management into all its significant business activities and responsibilities, fundamentally in the organization's governance and decision-making process. The organization is able to provide evidence of the systematic application of policies, procedures and practices to communication and consultation, establishment of the context and assessment, treatment, monitoring, review, recording and reporting of risks in accordance with the provisions of the reference standard UNE-ISO 31000:2018 regarding the Risk Management Process.

AENOR highlights as a strength the maturity and dynamism of the current Management Model implemented in the countries and regions where it operates based on initiatives such as: the focus on continuous improvement of the Management Model; the analysis of ESG and reputational risks aligned with Indra's Sustainability Plan; the consolidation of the assurance map describing the roles and responsibilities of each of the lines and providing information on the degree of effectiveness of Indra's Risk Management Model; and the consolidation of risk monitoring through mitigation plans as well as indicator monitoring. In short, this Management Model allows the organization to deal with changes in the context and to better focus on the critical risks for the Company, which benefits decision making.

Risk Management Culture

The Control and Risk Management System at Indra is a process led by the Board of Directors and Senior Management, and responsibility for it falls upon each and every member of the company. The purpose of the system is to provide reasonable assurance for the achievement of the established objectives. In line with this constant adaptation, Indra periodically updates the Risk Control and Management Policy, approved by the Board of Directors in 2016. The most recent review took place in 2023 and is available on the website. The Policy is complemented by policies and procedures that address Indra’s main processes.

These are also reviewed and updated on a regular basis to ensure compliance with the applicable regulations and the best practices in risk management.
The mission of the Global Risks Unit is to ensure the proper operation of the Risk Control and Management System by providing valid tools to assess, prioritize and manage risks. It also seeks to raise awareness regarding the importance of the Risk Management and Control System by encouraging the creation of a risk management culture at all levels.

About Indra

Indra (www.indracompany.com) is one of the leading global technology and consulting companies and the technological partner for core business operations of its customers worldwide. It is a world-leader in providing proprietary solutions in specific segments in Transport and Defence markets, and a leading firm in Digital Transformation and Information Technologies in Spain and Latin America through its affiliate Minsait. Its business model is based on a comprehensive range of proprietary products, with a high-value, end-to-end focus and with a high innovation component. In the 2022 fiscal year, Indra achieved revenue totaling €3.851 billion, with almost 57,000 employees, a local presence in 46 countries and business operations in over 140 countries.

About AENOR

Aenor (www.aenor.com) contributes to the transformation of society by building trust between organizations and individuals through compliance assessment services (certification, inspection and testing), training and information. It is Spain's leading certification body and more than 87,000 work centers have one of AENOR’s certifications in fields such as Quality Management, Sustainability, Verification of Non-Financial Information, Animal Welfare, Occupational Health and Safety, Digitalization and Compliance.
Among AENOR's differential competitive advantages are the highest brand recognition among companies (B2B) and consumers (B2C); having its own personnel, which allows it to manage accumulated knowledge for the benefit of its clients; innovating in the resolution of new competitive gaps thanks to its proximity to the sources of knowledge; and its geographical and sectoral capillarity.
AENOR is a global organization, and already operates in 87 countries. In Spain it has 19 offices in all the Autonomous Communities with its own auditors and a permanent presence in 12 other countries, mainly in Latin America and Europe.