Food, Beverage & Consumer Goods: Key performance indicators & metrics

The Audit and Risk Committee of our Board of Directors oversees our policies and practices with respect to risk assessment and risk management, including a review, in coordination with our management, of PMI’s management of cybersecurity. Our Chief Information Security Officer presents reports to the Audit and Risk Committee or to the full Board of Directors at least quarterly, which reports include cybersecurity risk status along with key performance indicators and key risk response strategies and plans.

The Corporate Risk Governance Committee receives quarterly reports on the Company’s overall cybersecurity risk exposure including the individual top cybersecurity threat scenario residual risk ratings and the plan and status of the cybersecurity risk program, to facilitate calibration with other enterprise risk domains and validation of the risk response plans. The Corporate Risk Governance Committee includes our Group CEO PMI; Chief Risk Assurance Officer; Chief Global R&D Officer; Chief Information Security Officer; Global Head Enterprise Risk Management; Group Chief Financial Officer; Group Controller; Vice President, Associate General Counsel & Corporate Secretary; Vice President, Associate General Counsel & Group Chief Compliance Officer, Group Chief Legal Officer; Chief Global Operations Officer; Chief Global Communications Officer; and our Chief Global Digital & Information Officer.

Cybersecurity incidents that have been determined to meet established SEC reporting consideration thresholds are promptly communicated to the Disclosure Committee, which is responsible for evaluating the potential materiality of such incidents and ensuring the accuracy, timeliness and completeness of related disclosures under applicable reporting obligations, and other relevant communications or presentations. The Disclosure Committee’s membership includes the following executives: the Vice President, Associate General Counsel & Corporate Secretary; the Group Chief Legal Officer; the Group Chief Financial Officer; the Group Controller; the Chief Risk Assurance Officer; and the Vice President, Investor Relations & Financial Communication. In addition, the Chief Information Security Officer serves as an advisor to the Disclosure Committee.