Focus areas
- Keep robust governance, management, compliance and stakeholder relationships core to business operations
Targets
- A transparent, simple and trusted approach to governance that benefits our people and our business
FY25 highlights
- Redefined our risk appetites approach and set Board-owned tolerances to sharpen risk focus
- Launched a top-level policy approach ensuring Group-wide consistency in the clarity, transparency and ease of accessing relevant information
- Achieved excellent audit results for ISOs 9001, 14001 and 45001, demonstrating a strong governance culture
FY26 next steps
- Strengthen our fraud awareness training, fraud risk assessment and prevention controls, in line with the new 'Failure to Prevent Fraud' offence under ECCTA
- Achieve ISO 27001 Information Security Management System certification
- Continue to identify and implement improvements in our approach to internal document management
The role of governance in ESG.
Governance creates the mechanisms to not only keep us honest around progress against our aims, but to also run our business in a way that creates:
- Fairness and inherently ethical conduct
- Empowerment and accountability through appropriate governance, management and compliance approaches
- The ability to maintain an effective strategy
- A culture that is able to avoid risks, and exploit opportunities
In recognising the importance of governance to the credibility of our environmental and social goals, Appendix A details the metrics and methodologies that we currently use to apply rigour to these goals.
External validation through ISO certifications.
We are proud to hold long-standing certifications in ISO 9001:2015 Quality Management, ISO 14001:2015 Environmental Management and ISO 45001:2018 Occupational Health and Safety Management. The management of these certifications is integral to our day-to-day operations, reflecting our strong commitment to delivering a quality and ethical service to our customers, minimising our environmental impact, and prioritising the health, safety and wellbeing of our people.
We are working towards achieving ISO 27001:2022 Information Security Management in FY26 to align with our already strong practices in securely handling personal data and managing against cyber threats. This, alongside our already existing Cyber Essentials Plus certification, demonstrates our commitment to robust information security management.

The effectiveness of our Risk Assurance Framework.
During FY25 we strengthened our Risk Assurance Framework through better defining our risk appetites. This further supports transparent decision making and commercial insight, both of which are core to our business.
We have consistently upheld strong governance of our Risk Assurance Framework - a priority reinforced by our Board. This includes:
- Promoting risk-aware behaviours
- Regularly reporting risk performance to the Audit Committee
- Assigning clear ownership of risks and controls across the business
- Supporting ethical decision making
- Driving continual improvement


Oliver Whittaker | CFO & Chair of Sustainability Committee
"The establishment of a Sustainability Committee in 2023, reporting directly to the Board, has been a significant step forward for Gattaca. This governance structure has allowed us to strengthen our oversight and accountability across our sustainability initiatives and drive meaningful progress in our sustainability journey. By bringing together diverse experience and expertise, the Committee has helped to shape a robust and informed sustainability strategy, whilst setting the tone that sustainability is prioritised within the Group. This collaborative approach enables us to direct our efforts toward the areas where we can have the greatest impact and create long-term value, not only for our business but also for our customers and the wider community."
















