GOVERNANCE PRIORITIES

???

Building a culture of integrity

Delivering cost-effective decarbonization

At KCC, business ethics is a core pillar of how we operate. In a global industry where we interact with diverse stakeholders, operating with integrity is critical. Our governance approach centers on compliance, transparency, and responsible conduct – all backed by a strong culture and clear expectations across our value chain.

Governance and compliance

KCC is governed by the Klaveness Compliance Program, which sets out procedures to prevent, detect, and address misconduct. All employees and crew are trained in our Code of Conduct and Anti-Corruption and Business Ethics Guidelines. Compliance is monitored through annual surveys, internal audits, and an external whistleblowing channel.

We assess all business partners using Know Your Counterparty (KYC) procedures, with counterparties facing exclusion where elevated compliance risks are detected. Our Counterparty Code of Conduct is required for suppliers and outlines minimum expectations for ethical conduct, human rights, and environmental responsibility.

Anti-corruption

We maintain zero tolerance for corruption and bribery. KCC prohibits facilitation payments and reports all such attempts. Regular updates from port visits and industry collaboration through the Maritime Anti-Corruption Network (MACN) support our preventative approach.

Violations of our policies can lead to termination of employment or contract.

Speaking up

KCC promotes a culture of openness and accountability. Our whistleblower channel is accessible to employees, crew, and external stakeholders. Whistleblowers are protected from retaliation under Norwegian law. All whistleblower cases reported are investigated and followed up with appropriate corrective actions.

Cyber security

As digital threats increase, cyber security has become a material focus. KCC is part of the Torvald Klaveness Information Security Management System (ISMS), aligned with ISO27001 and maritime cyber regulations. We continue to evaluate supplier security practices and will audit OSM Thome's cyber security systems following their takeover of fleet management.

Our own employees regularly undergo phishing simulations and cyber awareness training, with an aim of 100% training participation and improved threat response capabilities.