Risk management

We are a reliable company, so we operate within certain procedures and guidelines.

We have implemented an Integrated Management System throughout the organisation, which allows us , among other things, to improve our services, introduce modern organisational and technological solutions and create conditions for the self-education of our employees. The system is based on proven standards ISO 9001, 14001, 45001, 50001, ISO/IEC 27001 and Directive 2016/798/EU and Commission Regulation (EU) 2019/779.

Our business requires an effective risk management system, which we have included in our Corporate Risk Management Policy. We monitor and identify possible risks, implement control measures and take preventive and corrective actions. Our business model is adapted to the changes occurring in all business segments.

Since 2017, we have been running a Step by Step Programme. This initiative uses the practices of the Kaizen philosophy - it involves continuous improvement and enhancement of business, leadership and support processes. Step by Step contributes to improving quality, eliminating inefficiencies, properly organising a safe workplace, and optimising processes.

Cybersecurity

The security of our IT system is of great importance for our company, and also for the whole Polish state. The key solution used by us is SCADA (Supervisory Control And Data Acquisition), i.e. a real-time IT system for distribution network supervision. SCADA supervises the process of electricity supply through constant observation and control of the distribution network, which means we can quickly deal with disturbances and failures.

In 2020, we launched DLP technology at PGE Energetyka Kolejowa S.A. to ensure that sensitive data is protected from leakage. The new solutions cover both business-sensitive information (e.g. contracts, invoices, financial data) and legal information (e.g. personal data, technical data). The solution prevents sensitive data from being sent to unauthorised media and controls its transmission via email and cloud services. DLP can also encrypt sensitive documents so that they never leave our organisation unencrypted.

In 2021, we conducted a Cyber Safe campaign to educate our employees on this issue. Our goal is to achieve a rating that indicates a likelihood of unwanted behaviour of less than 6% in 2024.