Neftaly Holding Companies: Governance, Risk, and Compliance (GRC)

At Neftaly Holding Companies, effective governance, risk management, and compliance are not just regulatory obligations—they are the backbone of sustainable growth and operational excellence. Our approach ensures that every subsidiary and business unit within our portfolio operates under a unified framework of accountability, transparency, and strategic risk awareness.

Governance: Strong Leadership and Accountability

Our governance model is designed to foster ethical decision-making, clear accountability, and long-term value creation. Key elements include:

• Board Oversight: Our holding company board provides strategic direction, oversees subsidiary performance, and ensures adherence to corporate policies.
• Leadership Accountability: Executive teams are aligned with corporate governance principles, including fiduciary responsibilities, ethical conduct, and reporting transparency.
• Policy Frameworks: Standardized policies across subsidiaries support consistency, operational efficiency, and alignment with our core values.

Risk Management: Proactive Identification and Mitigation

Managing risk is central to our corporate strategy. Neftaly implements a comprehensive risk management framework to identify, assess, and mitigate risks across all levels:

• Enterprise Risk Management (ERM): Structured assessment of financial, operational, regulatory, and reputational risks.
• Scenario Planning & Stress Testing: Regular evaluation of potential market, economic, and operational disruptions to ensure resilience.
• Risk Culture: Promoting awareness and proactive reporting at all organizational levels, ensuring early detection and mitigation of potential threats.

Compliance: Ensuring Integrity and Regulatory Adherence

Compliance is embedded in the DNA of Neftaly’s operations. Our commitment ensures that all subsidiaries adhere to both local and international regulations:

• Regulatory Compliance: Monitoring changes in laws and regulations to guarantee timely adherence and reduce exposure to legal risks.
• Internal Controls: Robust control systems prevent fraud, errors, and non-compliance, safeguarding stakeholder interests.
• Ethics & Whistleblower Programs: Confidential channels empower employees to report unethical behavior, enhancing transparency and accountability.

Integrated GRC Approach

Neftaly’s GRC framework is not siloed—it integrates governance, risk, and compliance processes to deliver holistic oversight:

• Data-Driven Insights: Leveraging analytics for risk forecasting, compliance monitoring, and strategic decision-making.
• Cross-Functional Collaboration: Aligning legal, finance, operations, and IT teams to reinforce a unified risk and compliance strategy.
• Continuous Improvement: Regular audits, policy updates, and training ensure that governance practices evolve with changing business and regulatory landscapes.

Conclusion

For Neftaly Holding Companies, Governance, Risk, and Compliance are more than just operational mandates—they are strategic enablers that protect assets, strengthen trust, and drive sustainable growth. By embedding GRC across our organizational structure, we ensure that every investment, partnership, and subsidiary aligns with our commitment to integrity, resilience, and excellence.