Governance, management & compliance
Our clear governance structure allows strong oversight, transparency and accountability, enabling our people to effectively maintain compliance.
Focus area
- Keep robust governance, management, compliance and stakeholder relationships core to business operations
Targets
- A transparent, simple and trusted approach to governance that benefits our people and our business

FY24 highlights
- Commissioned a Risk Maturity Review to assess the appropriateness of our current Risk Assurance Framework, which showed that we are managing it well for our size and type of business
- Continual review and rationalisation of our Delegation of Authority Policy to maintain appropriate financial and risk management control for an agile business
- Commenced a review of the governance of our top-level risk policies, to ensure clarity and consistency across the board
FY25 next steps
- Flow down key risk policy approach to operational-level policies and procedures ensuring availability of information and clarity
- Review data collection points to develop the output value
Focus area
- Keep robust governance, management, compliance and stakeholder relationships core to business operations
Targets
- A transparent, simple and trusted approach to governance that benefits our people and our business

FY24 highlights
- Commissioned a Risk Maturity Review to assess the appropriateness of our current Risk Assurance Framework, which showed that we are managing it well for our size and type of business
- Continual review and rationalisation of our Delegation of Authority Policy to maintain appropriate financial and risk management control for an agile business
- Commenced a review of the governance of our top-level risk policies, to ensure clarity and consistency across the board
FY25 next steps
- Flow down key risk policy approach to operational-level policies and procedures ensuring availability of information and clarity
- Review data collection points to develop the output value
As an AIM-listed business, we have dedicated teams covering: Data & Compliance, IT Security, Tax, Health & Safety and Legal & Co Sec.
We hold multiple accreditations that support our rigorous governance procedures:

The Role of Governance in ESG
Governance creates the mechanisms to not only keep us honest around progress against our aims, but to also run our business in a way that creates:
- Fairness and inherently ethical conduct
- Empowerment and accountability through appropriate governance, management and compliance approaches
- The ability to maintain an effective strategy
- A culture that is able to avoid risks, but exploit opportunities
In recognising the importance of governance to the credibility of our environmental and social goals, Appendix A details the metrics and methodologies that we currently use to apply rigour to these goals. In addition, click here to read our FY24 Climate Related Disclosure.


Oliver Whittaker - CFO & Chair of Sustainability Committee
"The establishment of a Sustainability Committee in 2023, reporting directly to the Board, has been a significant step forward for Gattaca. This clear governance structure has allowed us to strengthen our oversight and accountability across our sustainability initiatives and drive meaningful progress in our sustainability journey. By bringing together diverse experience and expertise, the Committee has helped to shape a robust and informed sustainability strategy, whilst setting the tone that sustainability is prioritised within the Group. This collaborative approach enables us to direct our efforts toward the areas where we can have the greatest impact and create long-term value, not only for our business but also for our customers and the wider community."
The effectiveness of our Risk Assurance Framework
During FY24, our outsourced internal audit partner carried out a Risk Maturity Review of our Risk Assurance Framework to establish how our processes and approach compare to a defined model that follows the requirements of ISO 31000. This considered areas such as the methodology and approach we have in place we have in place, how we identify and assess risks and mitigating controls, how we use inherent and residual scoring methods, and reporting protocols via the governance structure.
The outcome of the review determined that we have “…designed a robust risk management process, leveraging risk management systems, tools and templates…” and that “…the framework and underlying processes are sound and have been designed appropriately”.
With the benefit of this review, and our continual improvement approach, we continue to fine tune and develop our Risk Assurance Framework to drive value, efficiency and effectiveness.
Our Governance Structure
In order to provide robust governance around our approach to sustainability, and to ensure it is fully embedded in the business, we have the below structure: