Governance, management & compliance.

Our clear governance structure allows strong oversight, transparency and accountability, enabling our people to effectively maintain compliance.

Go back to governance overview
Memberships & accreditations
ISO certifications
Risk Assurance
Governance structure

Focus areas

  • Keep robust governance, management, compliance and stakeholder relationships core to business operations

Targets

  • A transparent, simple and trusted approach to governance that benefits our people and our business

FY25 highlights

  • Redefined our risk appetites approach and set Board-owned tolerances to sharpen risk focus
  • Launched a top-level policy approach ensuring Group-wide consistency in the clarity, transparency and ease of accessing relevant information
  • Achieved excellent audit results for ISOs 9001, 14001 and 45001, demonstrating a strong governance culture

­­­­­­­­­­­­­­­­­­­FY26 next steps

  • Strengthen our fraud awareness training, fraud risk assessment and prevention controls, in line with the new 'Failure to Prevent Fraud' offence under ECCTA
  • Achieve ISO 27001 Information Security Management System certification
  • Continue to identify and implement improvements in our approach to internal document management

The role of governance in ESG.

Governance creates the mechanisms to not only keep us honest around progress against our aims, but to also run our business in a way that creates:

  • Fairness and inherently ethical conduct
  • Empowerment and accountability through appropriate governance, management and compliance approaches
  • The ability to maintain an effective strategy
  • A culture that is able to avoid risks, and exploit opportunities

In recognising the importance of governance to the credibility of our environmental and social goals, Appendix A details the metrics and methodologies that we currently use to apply rigour to these goals.

MEMBERSHIPS & ACCREDITATIONS

Memberships & accreditations.

As an AIM-listed business, we have dedicated teams covering: Data & Compliance, IT Security, Tax, Health & Safety and Legal & Co Sec.

We also hold multiple external memberships and accreditations that support our rigorous governance procedures:

irure cupidatat

Nostrud minim do in.

tempor sunt

Elit ipsum aute do. Exercitation ut dolore qui. Id tempor aute incididunt occaecat culpa mollit.

qui aliquip

Aute ut aliqua officia quis consequat duis. Ut velit quis proident excepteur labore nisi. Cupidatat sit commodo reprehenderit et cillum.

deserunt commodo

Aliqua cillum dolor aliquip voluptate. Amet consectetur pariatur.

elit proident

In laborum ut veniam occaecat non excepteur dolor. Nostrud culpa non pariatur. Ipsum cupidatat cillum et.

sint et

Consequat labore aliquip officia fugiat pariatur. Tempor ut ex fugiat. Incididunt amet exercitation ullamco labore veniam aliquip.

laborum sit

Amet irure aute adipisicing. Occaecat amet qui.

anim cillum

Eu do labore Lorem mollit est.

laborum fugiat

Occaecat ad duis ullamco ea tempor adipisicing. Proident dolore aliqua esse. Magna dolor id sunt tempor.

proident laborum

Incididunt laboris tempor adipisicing. Amet consectetur excepteur irure enim. Culpa voluptate sit sunt.

anim dolore

Fugiat est quis. Veniam adipisicing id irure non magna nostrud esse. Aute officia mollit ut voluptate aute occaecat.

irure aliqua

Minim magna amet esse exercitation velit irure. Exercitation eiusmod enim dolore.

ad commodo

Tempor commodo mollit.

do et

Enim pariatur aliquip ex consectetur in. Ea officia esse consectetur pariatur deserunt.

elit fugiat

Quis veniam reprehenderit fugiat esse sunt laboris.

consequat ullamco

Magna duis veniam quis irure culpa laboris sunt.

ISO CERTIFICATIONS

External validation through ISO certifications.

We are proud to hold long-standing certifications in ISO 9001:2015 Quality Management, ISO 14001:2015 Environmental Management and ISO 45001:2018 Occupational Health and Safety Management. The management of these certifications is integral to our day-to-day operations, reflecting our strong commitment to delivering a quality and ethical service to our customers, minimising our environmental impact, and prioritising the health, safety and wellbeing of our people.

We are working towards achieving ISO 27001:2022 Information Security Management in FY26 to align with our already strong practices in securely handling personal data and managing against cyber threats. This, alongside our already existing Cyber Essentials Plus certification, demonstrates our commitment to robust information security management.

RISK ASSURANCE

The effectiveness of our Risk Assurance Framework.

During FY25 we strengthened our Risk Assurance Framework through better defining our risk appetites. This further supports transparent decision making and commercial insight, both of which are core to our business.

We have consistently upheld strong governance of our Risk Assurance Framework - a priority reinforced by our Board. This includes:

  • Promoting risk-aware behaviours
  • Regularly reporting risk performance to the Audit Committee
  • Assigning clear ownership of risks and controls across the business
  • Supporting ethical decision making
  • Driving continual improvement
Read more about our Risk Management Framework in our FY25 Annual Report & Accounts →

Oliver Whittaker | CFO & Chair of Sustainability Committee

"The establishment of a Sustainability Committee in 2023, reporting directly to the Board, has been a significant step forward for Gattaca. This governance structure has allowed us to strengthen our oversight and accountability across our sustainability initiatives and drive meaningful progress in our sustainability journey. By bringing together diverse experience and expertise, the Committee has helped to shape a robust and informed sustainability strategy, whilst setting the tone that sustainability is prioritised within the Group. This collaborative approach enables us to direct our efforts toward the areas where we can have the greatest impact and create long-term value, not only for our business but also for our customers and the wider community."
Read more about our Sustainability Committee in our FY25 Annual Report & Accounts →
GOVERNANCE STRUCTURE

Our Governance Structure.

In order to provide robust governance around our approach to sustainability, and to ensure it is fully embedded in the business, we have the below structure:


Go back to governance overview ↑

Contents
Sustainability@Gattaca
Environment
Achieving our low-carbon commitments
Providing the STEM skills to build a low carbon future
Social
Promoting the health, wellbeing & development of our colleagues
Creating equitable & inclusive workplaces for our colleagues & customers
Positively impacting our communities & philanthropic partnerships
Governance
Governance, management & compliance
Fair & ethical conduct
Appendices