Risk Management
Effective risk management is integral to our business operations and a fundamental pillar of corporate governance. The ability to identify, assess, and mitigate diverse risks is essential to driving stable, sustainable growth, enhancing our resilience against evolving challenges, and reinforcing stakeholder confidence. Reflecting this, the company is committed to a comprehensive, continuous risk management framework. This ensures our operations remain efficient, transparent, and strictly aligned with long-term value creation.
Policy and Framework
Exotic Food has established a formal Risk Management Policy, reviewed and approved by the Board of Directors, to guide our risk oversight across the organization. This policy ensures that we can effectively respond to challenges at all levels while maintaining compliance, operational efficiency, and long-term organizational preparedness.
To ensure a structured approach, our framework aligns with the globally recognized COSO Enterprise Risk Management (ERM) 2017 standard, seamlessly connecting corporate strategy with daily operations. This comprehensive framework enables the company to identify, assess, and mitigate operational and strategic risks across all dimensions, embedding resilience into our core business practices.
Risk Management Governance Structure
Our risk management governance ensures clear accountability, robust oversight, and continuous monitoring across the organization. The Board of Directors holds ultimate responsibility for risk oversight, supported by the Audit and Risk Committee, which provides strategic guidance, monitors risk performance, and ensures alignment with corporate objectives.
Day-to-day implementation is managed by the dedicated Risk Management Working Group, chaired by the CEO and comprising senior executives from finance, operations, and key departmental management. The Working Group drives risk identification, assessment, and mitigation across all business units, preparing consolidated reports for quarterly Board review. This structural governance ensures that risk management remains rigorous, transparent, and highly adaptable, reinforcing organizational resilience against evolving uncertainties.
Risk Management Processes
We apply the COSO Enterprise Risk Management (ERM) framework through a structured five-step process to identify, assess, and mitigate risks across the organization.
- 1. Objective Setting: We define clear, SMART objectives—Specific, Measurable, Achievable, Relevant, and Time-bound—to guide risk management activities and align them with corporate priorities.
- 2. Risk Identification: Internal and external factors that could affect objectives are systematically analyzed, including economic conditions, market competition, technological changes, and operational variables.
- 3. Risk Assessment: Risks are evaluated based on their likelihood and impact, then categorized into three levels—low, medium, and high. Potential impacts are assessed across financial, reputational, customer, operational, and workforce dimensions.
- 4. Risk Response: Appropriate mitigation strategies are applied using the 4T approach—Take (accept risks within our established risk appetite), Treat (reduce or control risks through additional measures), Terminate (avoid or cease activities that pose unacceptable risk), and Transfer (share or transfer risks, such as through insurance).
- 5. Monitoring and Reporting: Risks are continuously monitored and reviewed at least quarterly, with consolidated reports submitted to the Audit and Risk Committee and the Board of Directors to ensure dynamic oversight and timely corrective action.
This structured process ensures that risk management is proactive, consistent, and seamlessly integrated into day-to-day operations, enhancing organizational resilience and our ability to respond effectively to uncertainties.
Reporting
Risk Assessment Methodology
To effectively prioritize and manage potential threats, we establish a comprehensive Risk Profile. This framework allows us to evaluate risks based on their probability of occurrence (Likelihood) and their resulting consequences (Impact). Concurrently, it helps us clearly define our acceptable limit of risk, known as our Risk Appetite Boundary.
| Risk Map | |||||
|---|---|---|---|---|---|
| Likelihood | Impact | ||||
| 1 | 2 | 3 | 4 | 5 | |
| 5 | 5 | 10 | 15 | 20 | 25 |
| 4 | 4 | 8 | 12 | 16 | 20 |
| 3 | 3 | 6 | 9 | 12 | 15 |
| 2 | 2 | 4 | 6 | 8 | 10 |
| 1 | 1 | 2 | 3 | 4 | 5 |
Risk Classification Criteria
| Overall Risk Level | Score Level | Description |
|---|---|---|
| Low | 1 - 2 (Green) | Acceptable risk level without the need for risk controls. No additional management is required. |
| Medium | 3 - 9 (Yellow) | Acceptable risk level, but requires control measures to prevent the risk from escalating to an unacceptable level. |
| High | 10 - 25 (Red) | Unacceptable risk level, requiring a risk mitigation plan to reduce the risk to an acceptable threshold. |
Strategic Risk Management Approach
We recognize the vital importance of a systematic and proactive risk management process, conducting comprehensive risk assessments on an annual basis. By integrating our corporate strategic plans with the analysis of our Material ESG Topics, we ensure our strategic direction continuously aligns with evolving global trends and stakeholder expectations across all operations.
To maintain stringent control and foster business resilience, we utilize a well-structured risk hierarchy. High-level organizational threats with significant impacts are managed under our Enterprise Risk Management (ERM) framework. Concurrently, functional and unit-specific risks are closely monitored and proactively addressed through Operational Risk Management (ORM) within their respective business units. Effectively integrating these risk dimensions enables us to minimize potential disruptions, secure business continuity, and deliver sustainable, long-term value to all stakeholders
Management of Important Risks
| Risk Category: Supply Chain and Marketing | ||||
|---|---|---|---|---|
| No. | Risks | Risk Factors | Impacts | Responses |
| 1 | Losing sales opportunity from existing and new customers | Performance issues with packaging materials that may delay deliveries | Challenges with packaging material performance could potentially cause delivery delays, which may affect customer satisfaction and confidence. If not properly managed, these delays might influence purchasing decisions and directly impact corporate revenue | - Monitor and analyze packaging performance issues to identify root causes and potential impacts on production and delivery - Collaborate with suppliers to resolve immediate issues and implement longer-term improvements |
| 2 | Reduced customer confidence with potential implications for future purchasing behavior | - Test, track, and update packaging designs regularly to ensure reliability and effectiveness - Develop and source new packaging solutions, including exploring alternative suppliers when needed - Conduct regular cross-functional meetings to review progress, coordinate improvements, and align packaging development with customer requirements | ||
| Risk Category: Supply Chain | ||||
| No. | Risks | Risk Factors | Impacts | Responses |
| 3 | Losing sales opportunity from existing and new customers | Changes in weather conditions/Climate Change may potentially affect the availability of chili supply | Changes in weather conditions/Climate Change may potentially disrupt the availability of chili, which could affect production schedules and product availability. Such disruptions may impact customer satisfaction and confidence, and if not properly managed, these factors could directly impact corporate revenue | - Monitor chili stock levels and production requirements to support consistent supply - Collaborate with suppliers to plan cultivation according to production needs and secure timely deliveries - Inspect raw materials for quality and manage sorting processes to meet standards - Explore alternative suppliers or expand sourcing areas to mitigate supply risks - Evaluate and monitor supplier performance to ensure reliable delivery and quality - Track climate and weather patterns to anticipate potential supply disruptions and adjust sourcing or production plans accordingly |
| 4 | Risk of contracts with strategic customers is impacted due to quality issues in key raw materials | Potential quality issues in raw chili materialss | Potential quality issues in chili raw materials could affect production processes and the consistency of finished products. Such issues may influence customer satisfaction and confidence, and if not properly managed, these factors could directly impact operational stability and strategic relationships | - Promote awareness and provide training to farmers on safe and responsible use of agricultural chemicals - Explore chili sourcing from Good Agricultural Practice (GAP) certified farms and reliable suppliers to ensure high-quality raw materials - Monitor and test raw materials regularly for quality and chemical residues, including third-party verification - Collaborate with farmers and suppliers to address quality issues and improve compliance with standards |
| Risk Category: Hazard | ||||
| No. | Risks | Risk Factors | Impacts | Responses |
| 5 | Risk of chemical contamination due to potential industrial incidents at nearby facilities | Potential industrial accidents at neighboring facilities | An incident at nearby industrial facilities could lead to the release of hazardous substances, potentially affecting the surrounding environment and community. Such events may also disrupt operations, create safety concerns, and directly impact stakeholder confidence | - Engage safety experts to analyze potential risks - Design a buffer zone between our facility and neighboring factories, including greenery and safe parking areas - Install LPG tanks in open areas away from heat or sparks - Conduct chemical risk assessments to prepare for emergency scenarios - Develop emergency response plans for chemical spills or industrial incidents - Install gas detection systems connected to fire alarms for timely evacuation - Implement automated fire sprinkler systems - Explore AI-assisted monitoring and alert systems for real-time hazard detection - Maintain a 24-hour on-site fire team for continuous monitoring and response - Maintain comprehensive insurance coverage |
| Risk Category: Compliance | ||||
| No. | Risks | Risk Factors | Impacts | Responses |
| 6 | Potential restrictions on exporting products to partner countries | Potential non-compliance of products with EU regulatory requirements | Potential regulatory non-compliance in key markets could impact product availability, operational continuity, and stakeholder trust, directly affecting international market expansion | - Monitor and review product and supplier test results for regulatory compliance - Review product and raw material standards against domestic and partner country laws, while updating specifications and labels accordingly |
| 7 | Potential product recalls from partner countries | - Support employee knowledge through targeted training and compliance assessments - Explore high-quality raw materials, focusing on items with past compliance challenges, and ensure effective laboratory testing - Optimize sampling plans and production schedules to ensure products are verified and cleared before release | ||
Emerging Risks
In addition to managing existing risks and challenges, the company proactively identifies and monitors emerging risks—evolving, systemic threats that carry high uncertainty and the potential to significantly disrupt business operations. By systematically evaluating the likelihood and potential impact of these newly developing factors, the company establishes targeted preventive and mitigation controls.
To further elevate our overall risk management capabilities, the company is strategically expanding its current Enterprise Risk Management (ERM) framework into a comprehensive Business Continuity Planning and Management (BCP/BCM) system. Scheduled for formal implementation in 2026, this strategic enhancement will transform our proactive risk assessments into highly actionable response strategies, reinforcing our long-term preparedness and ensuring organizational resilience against global uncertainties.
| Risk Category: Climate | ||||
|---|---|---|---|---|
| No. | Risks | Risk Factors | Impacts | Responses |
| 1 | Chili Supply Chain Disruption Due to Drought Conditions | Climate change leading to extreme heat, severe drought, irregular rainfall patterns, and an overall increase in weather volatility | Extreme weather volatility may significantly reduce agricultural yields, particularly for core raw materials like chili. This disruption could lead to raw material shortages, compromised physical quality of the produce, and increased overall production costs, ultimately affecting supply chain resilience and long-term sustainability goals. | - Diversify cultivation locations and agricultural supplier networks to mitigate localized weather impacts - Monitor climate patterns and crop yield forecasts closely to anticipate potential supply shifts - Support farmers with alternative water sources and effective water management guidelines in cultivation areas - Implement strategic stockpiling of raw materials during optimal harvest seasons to secure production needs - Explore the feasibility and data requirements for integrating future Climate Scenario assessments into our risk management framework |
| Risk Category: Geopolitics | ||||
| No. | Risks | Risk Factors | Impacts | Responses |
| 2 | Global logistics disruptions and severe container shortages | Escalating geopolitical tensions and regional conflicts affecting international trade routes | Geopolitical volatility poses a significant threat to international logistics networks, particularly leading to critical shortages of shipping containers and vessel availability. These constraints can result in prolonged transit times and surging freight costs, which adversely impact gross margins, disrupt the global supply chain, and impair overall operational efficiency. | - Monitor international shipping routes and global logistics trends continuously to anticipate and navigate potential disruptions - Develop comprehensive contingency plans with alternative logistics providers and freight forwarders - Diversify shipping routes (Route Diversification) to minimize reliance on high-risk geographic corridors - Optimize shipment planning and inventory management to maintain high operational flexibility - Engage proactively with business partners and customers to ensure seamless communication over foreign delivery expectations |
| Risk Category: Compliance | ||||
| No. | Risks | Risk Factors | Impacts | Responses |
| 3 | Potential restrictions on market access and export continuity | Increased stringency of the EU Rapid Alert System for Food and Feed (RASFF) regarding chemical residues and food safety standards | Heightened scrutiny and stricter chemical residue inspections by EU authorities could lead to product rejections, customs delays, or import bans if compliance is not fully achieved. Such non-compliance would directly disrupt export continuity, potentially resulting in immediate revenue loss, diminished market share, and long-term damage to corporate reputation. | - Monitor evolving international food safety regulations and regulatory updates continuously to ensure strict compliance - Establish highly stringent quality and safety standards regarding chemical residues within all raw material purchasing contracts - Enhance inspection protocols and rigorous quality control measures for all incoming raw materials - Evaluate and audit supplier performance regularly to guarantee strict adherence to safety standards - Upgrade existing traceability and food safety management systems to align with the latest international compliance requirements |
| 4 | Cost escalation from sustainable packaging transition | Anticipated enforcement of the EU Packaging and Packaging Waste Regulation (PPWR) and stricter environmental mandates | The phased enforcement of EU environmental and packaging regulations, particularly the PPWR, mandates stricter recycling requirements and structural changes to packaging designs. This transition may directly impact current packaging formats, drive up overall product costs, and require significant operational adjustments to ensure full compliance with the European market standards. | - Monitor and study evolving EU packaging regulations and environmental mandates continuously to anticipate necessary shifts - Assess the potential financial and operational impacts of transitioning to compliant packaging materials - Promote the integration of eco-friendly and recyclable packaging alternatives across the product portfolio - Collaborate strategically with packaging suppliers to source sustainable materials and drive innovation - Incorporate Circular Economy principles and broader sustainability goals into the packaging development process |
Whistleblowing and Complainant Protection
Under the oversight of our Board of Directors, we maintain secure, dedicated channels for employees and stakeholders to safely raise concerns, share feedback, and report any suspected non-compliance or ethical misconduct. To ensure every issue is addressed promptly and fairly, we have established a clear, structured procedure for handling complaints and suggestions, as follows:
1. Channels for Complaints and Suggestions
Employees and stakeholders may submit their concerns by discussing them directly with their Department Head, or by completing a formal complaint form (including supporting evidence, if available) and submitting it through any of the following designated individuals and channels:
1.1 Secretary to the Board of Directors
E-mail: pichayada@exoticfoodthailand.com
By Mail: Secretary to the Board of Directors, 130-132, 9th Floor, Sindhorn Tower 2, Lumpini, Pathum Wan, Bangkok 10330
Tel: (02) 650 7779
1.2 Secretary to the Audit and Risk Management Committee
E-mail: ia@exoticfoodthailand.com
By Mail: Secretary to the Audit and Risk Management Committee, 49/42 Moo 5, Thung Sukhla, Si Racha, Chonburi 20230
Tel: (038) 493 752-3
Fax: (038) 401 493
1.3 Company Secretary
E-mail: pichayada@exoticfoodthailand.com
By Mail: Company Secretary, 130-132, 9th Floor, Sindhorn Tower 2, Lumpini, Pathum Wan, Bangkok 10330
Tel: (02) 650 7779
1.4 Human Resources Manager
E-mail: hr@exoticfoodthailand.com
By Mail: Human Resources Manager, 49/42 Moo 5, Thung Sukhla, Si Racha, Chonburi 20230
Tel: (038) 493 752-3
Fax: (038) 401 493
1.5 Online System
Via the online platform on the website: www.exoticfoodthailand.com
1.6 Internal Suggestion Box
Via the internal suggestion/complaint boxes located within the company premises.
2. Roles and Responsibilities
3. Complaint Handling Process
To ensure that every concern is treated with the utmost seriousness, confidentiality, and fairness, we have established a rigorous and systematic complaint handling process. This structured framework guarantees that all reports are thoroughly investigated and impartially resolved through the following steps:
1. Initial Screening and Review
The Report Receiver categorizes the issue. Vague or unsupported reports are archived or dismissed. Routine issues are forwarded to the Executive Committee, while severe allegations (e.g., corruption, legal breaches) are escalated to the Audit and Risk Management Committee within three working days.
2. Complainant Communication
For complainants who disclose their identity, we maintain direct communication. We acknowledge receipt, request any needed information within seven working days, provide progress updates, and share the final outcome.
3. Investigation Routing
To guarantee objectivity, cases are assigned based on severity and the respondent's position:
- HR violations: Handled by the HR Manager.
- Corruption cases: Managed by the Chairman or Audit Committee.
- Complex/Executive-level cases: Assigned to an independent Fact-Finding Committee.
4. Impartiality and Final Approvals
The Vice Chairman appoints neutral investigators and Case Coordinators with no conflicts of interest. Any disciplinary action against management-level employees requires final approval directly from the Board of Directors.
4. Protection of Complainants and Investigation Participants
Anonymity: Complainants may choose to remain anonymous for their safety. However, disclosing your identity allows the Company to provide progress updates.
Confidentiality & Non-Retaliation: All information is kept strictly confidential. The Company guarantees full protection against any retaliation, harassment, or unfair treatment (such as demotion, suspension, or termination), and allows reporters to request specific protection measures to ensure their safety.
Remediation: If anyone suffers harm or distress due to the complaint process, the Company will provide appropriate and fair relief.
5. Processing Timeframes
- Within 3 Days:The Report Receiver forwards the complaint to the Case Coordinator.
- Within 7 Days: The Case Coordinator assigns the case to an investigator.
- Within 30 Days:The investigator reports the final outcome and proposed disciplinary actions to the Case Coordinator. (Note: Actions proposed by Internal Audit require Audit & Risk Management Committee approval).
- Within 60 Days: Fact-Finding Committees report their final conclusions and proposed actions.
- Extensions:Up to 30 days per request, subject to formal Committee or Board approval.
- Non-Compliance: Missed deadlines without an approved extension breach policy and require a formal written explanation to the appointing authority.
6. Reporting Procedures
- General Outcome: The Case Coordinator securely communicates the final resolution to all relevant parties, including the complainant, the respondent, and the investigators.
- Committee Reporting: The Fact-Finding Committee submits the investigation summary and resulting disciplinary actions to the Audit and Risk Management Committee. Cases involving suspected corruption are reported directly to the Board of Directors.
- Immediate Escalation: Any complaint posing a material risk to our financial standing, operational continuity, or corporate reputation must be escalated to the Audit and Risk Management Committee immediately.