We incorporate security and human rights management into our ESG strategy and plans and operational activities and abide by the Voluntary Principles on Security and Human Rights (VPs)..

We use media monitoring and risk intelligence platforms to collect, process, analyze, and generate risk intelligence. We issue timely security risk alerts as necessary to employees based at our overseas projects, as well as those on international business trips, and carry out travel risk management. At the same time, such information also provides objective and credible benchmarks for the design of security systems, and viable intelligence for management decisions. 

We assess our baseline security risk management and the risk levels of our projects following ISO 31000 standards, as well as security risk assessment models recognized by the international security industry, including elements set by international security experts, and formulated corresponding mitigation measures. Further details on our security risk management are articulated in our Security and Human Rights Policy, Guidelines on the Principles of the Use of Security Force Overseas, Guidelines on Security Facilities and Security Forces for Overseas Projects, and other security management policies, baseline security standards, and crisis management plans.

Our project security risk assessment (SRA) is a comprehensive assessment of assets, threats, risks, and security weaknesses on a given project site. Based on the implementation of baseline security standards, the SRA will identify the unique risks facing a given project as well as the weaknesses in its existing PPS. The SRA will determine the priority of the risks to be addressed, offer risk mitigation advice, and put in place extra security measures.   

The SRA process is in line with ISO 31000 standards and follows security risk assessment models recognized by the international security industry with elements specified by international security experts. Assessment is conducted by professionally qualified personnel or security providers.   

All overseas subsidiaries whose security is managed by Zijin follow the following project security risk assessment process:

We regularly conduct internal audits and on-site inspections to assess compliance and implementation of security policies and implicated regulations of our subsidiaries. In the audit process, on-site security inspection may be conducted where conditions allow based on the actual risk levels and priorities. 

The process and frequency of on-site inspections shall be based on the level of the threats and risks faced by the sites. Projects located in moderate- or high-risk countries/regions are inspected monthly. We carry out regular inspections on security personnel, processes, and equipment, and record non-compliance with regulations/standards. The following is recorded in inspection reports: