Xeon’s Board of Directors and top management are committed to ensuring that a strong governance framework operates throughout the organisation.

Xeon has implemented a risk model, based upon the principles and guidelines of ISO 31000:2009, in order to protect the interests of the owners and associated stakeholders.

Xeon’s Audit, Risk and Compliance Committee provides governance and oversight regarding appetite for risk and acceptable tolerance levels and empowers senior management to implement acceptable risk mitigations and report back to the committee quarterly.  Risks are evaluated against Xeon’s key strategic objectives and under-pinning principles, including, but not limited to:

• Growth objectives
• Profitability targets
• Environment sustainability principles
• Reputation in the market
• Legal obligations
• Business continuity

Xeon offsets residual risk and unavoidable risks factors through comprehensive insurance cover to ensure that consequences of risk events do not result in a severe adverse financial impact on the organisation.

Xeon is passionate about quality.  Quality in everything we deliver is directly translatable into high levels of service delivery and customer satisfaction.  Xeon embodies and manages sustainable achievement of its client key performance indicators through its ISO 9001:2015 (quality) accreditation which underpins our drive for quality management, continuous improvement and process excellence.

Xeon has extended its ISO standards accreditation to include ISO 13485: 2016 in recognition of our solutions provided into the pharmaceutical sector. The requirements of this standard are applied across all our industry sectors, not purely within our pharma business.

Xeon is subject to a wide range of legislation as a South African registered legal entity.  Our internal and external legal teams monitor legislative and regulatory developments and together with our compliance team, as applicable, drive the development and implementation of revised processes and standards to ensure we remain compliant with all applicable regulation and legislation.

Legal compliance is reported quarterly to the Audit, Risk and Compliance Committee, reporting on:

• Potential new legislative requirements, and the Group’s response to implement
• Compliance against existing legislative requirements

Xeon’s internal and external legal teams are responsible to review and conclude all legal and contract negotiations with suppliers, customers and other relevant stakeholders.  Post contractual finalisation, the legal and compliance teams are required to regularly review contracts and their executing terms in order to monitor compliance against the terms and conditions on an ongoing basis.

Xeon ensures it’s operations, processes and systems adhere to the data privacy and information security requirements in all the territories in which we have presence or operate.

Data privacy and information security compliance is monitored through the legal and compliance function, which provides oversight and autonomy of reporting into the Audit, Risk and Compliance Committee.

Technical and operational support and implementation thereof is managed through the Information Technology function who provide specialist knowledge and solutions regarding cyber-security, and technological solutions to counteract the ever increasing risks and requirements regarding data protection, data privacy and information security.