Safety and health

Safety and health are of paramount importance at Petrofac. Our aim is for zero safety incidents. We see this as an entirely realistic and achievable goal and are proud to say that, much of the time, we do live up to it.

Our people care. They are obligated and empowered to intervene and stop the work whenever they observe an unsafe situation. They understand that safety is everyone's responsibility.

Our HSE strategy is centred on 5 pillars:

• Leadership: the shadow you cast
• Employee engagement: greater engagement, fewer incidents
• Contractor management: consistency and performance driven
• Training: formalise, simplify, and standardise, with a refreshed learner experience
• Compliance: do it right, first time

These pillars define our future actions and initiatives and position us as the partner of choice for our customers.

The major themes of the strategy include:

• Data-2-Decisions – using data and analytics from key leading and lagging indicators to define areas of focus and reduce incidents
• Technology enabled – extensive use of mobile technology to increase situational awareness
• Engagement and communication – engaging, insightful, focused and even fun
• Proactive vs. reactive – observations and interventions before an incident occurs
• Accountability – the joint ownership of HSE performance by line management and the HSE function

Zero is the only acceptable number

In line with our internal safety campaign - Horizon Zero - there is no other number we would tolerate.

Horizon Zero encourages each employee, and those we work alongside, to:

• Recognise hazards and reduce risk by identifying, understanding and dealing with them
• Take personal ownership for safety by demonstrating personal commitment and competence throughout the organisation
• Assure asset integrity by maintaining assets in a safe, reliable and efficient condition

We will achieve these objectives through leadership, communication, and co-operation.

Increased focus on employee wellbeing

In recent years, we have significantly increased our dedication to wellbeing and mental health of our employees.

We delivered several all-employee health webinars and internal campaigns covering both physical and mental health, which generated high levels of engagement across all of our offices and project sites globally, such as Eat Healthy Stay Healthy, Positive Mental Health Practices, Ramadan Health, Heart Health, Mental Health Awareness, and Breast Cancer.

In addition, our Company Doctor runs an online Wellness Wednesday programme for all employees. A campaign was launched to ensure that all our onsite employees have a regular medical examination, and everyone is encouraged to participate in exercise and fitness sessions, such as yoga and cycling. We also extended our mental health awareness initiatives. After successfully piloting our approach in the UK, we rolled the initiative out in Sharjah, where 24 newly trained Mental Health First Aiders helped us to draw attention to mental health issues and reduce the stigma that traditionally surrounded them.

Strengthening our safety culture

Every year we strive to enhance our programme of health, safety, and environment (HSE) measures. We also continue to refine the way we measure our performance.

Some of our health and safety initiatives include:

Employing digital for a safer work environment

In line with our wider digital transformation programmes, new technologies are playing an ever more prominent role in our HSE activities.

To ensure that our people are proactively and routinely engaged in health and safety, we introduced a number of digital and mobile tools. These include:

• HSE dashboards – all employees are given access, via their mobile phones, to real-time safety performance, which is available at the project, country, and business unit level. This helps us to raise awareness of our safety performance, demonstrate that everyone at every level is accountable, and keep the entire organisation focused on improving performance.
• HSE observation reporting tool – a mobile app, available to all employees, enabling them to report any safety observations, both good and bad, via their mobile phones. In 2022, we saw a 470% increase in the reporting of safety observations, with more than 140,000 observations reported. This new app helps us to keep employees engaged, as well as providing useful insights and leading indicators of potential issues.
• HSE social networking – we use the Yammer platform to host an HSE social networking dialogue, which involves everyone in the HSE team and is open to anyone in the Company. With more than 350 active members, this is the second most active Yammer group in Petrofac.
• Driving improvement app – we replaced many of our in-vehicle monitoring systems with a mobile app, available to all employees. As well as keeping track of their driving behaviour, allocating a score, and providing personalised road safety advice, it enables everyone to see how their driving performance compares to their colleagues.

Security and crisis management

We work in some challenging environments with fast-changing security issues.

Our aim is to protect our employees, partners and assets in a responsible manner, and to prevent any security-related disruption to our operations. Our security and crisis management teams are closely integrated into the wider HSE community. Our Security and Crisis Management Policies set out the responsibilities of our senior management team and our business units.

Cyber-security and data protection

In response to rapidly evolving data security risks, and to support Petrofac’s wider digitalisation initiatives, we have a strong focus on cyber-security and data protection.

We re-evaluated our controls, particularly those related to our cloud-based platforms and applications, and continued to monitor and address any supply chain risks. Meanwhile, we continued to align our information security management practice with the ISO27001 standard and other best practices.

Related initiatives included:

• Enhancing our internal awareness programmes, with particular attention on the risks posed by phishing and social engineering, drawing attention to the increased sophistication of such attacks, while also running simulation tests and enhancing our related controls
• Continuing to enhance our threat detection and threat-hunting capabilities
• Continuing the assessment of cyber-security risks with regular vulnerability assessments, penetration tests and Red Team exercises.

Cyber-security remains a key priority in all our digitalisation initiatives, and we ensure that appropriate security protection is embedded from the initial idea and conceptual phases.