Empowerment and Accountability
MERRY actively manages potential risks in its operations. The Risk Management Team has established related risk management procedures according to ISO 31000:2018. These procedures include regularly assessing and monitoring risk-bearing capacity, the status of assumed risks, deciding on risk response strategies, and ensuring compliance with risk management processes. The team reports the operational results to the Board of Directors annually (the most recent report was on December 28, 2023, covering the year's execution status and the plan for the following year). Currently, the scope of risk management covers 16 types of risks: "Operational," "Quality," "Energy," "Environmental," "Technical," "Supply Chain," "Financial," "Tax," "Information Security," "Human Resources," "Facilities," "Occupational Safety and Health," "Strategic," "Legal," "Ethical Management," and "Business Interruption." Using risk assessment tools in procedural documents, risks are categorized into four levels. The responsible units discuss whether further control measures are needed for the listed risks, resulting in a risk matrix analysis. Furthermore, this risk operation is integrated with management systems such as ISO 9001, ISO 22301, ISO 27001, ISO 45001, ISO 50001, TIPS, and GB/T 29490. Annual internal and external audits of these systems ensure the effectiveness of risk management control measures. Additionally, to ensure the company's stable growth and sustainable business objectives, the Risk Management Team continuously conducts risk management training courses and promotes the already implemented climate-related financial disclosures (TCFD) risk items to subsidiaries. In the future, the team will follow the Business Continuity Management (BCM) ISO 22301 standard to continue practicing the business continuity plan (BCP) established based on business impact analysis results and organizational status.
Risk Matrix Analysis
The following matrix analysis illustrates the distribution of residual risks after the implementation of control measures at MERRY
Unit Name | Key Risk Category | Risk Items | Control Mechanism |
---|---|---|---|
Electroacoustic Products Group | Operational Risk | High customer concentration |
|
Battery Products Division | Operational Risk | - | - |
Microphone Products Division | Operational Risk | High customer concentration, inability to match production capacity with market demand, quality issues with outsourced packaging, specific suppliers controlling key materials/technology, declining customer credit, semiconductor supply chain capacity constraints, talent loss, geopolitical tensions affecting customer orders |
|
Technology HQ Risk Management Team | Environmental Risk | - | - |
Technology Division |
Quality Risk Energy Risk Technical Risk
|
- | - |
Supply Chain Division | Supply Chain Risk | - | - |
Group Financial Division |
Financial Risk Tax Risk
|
- | - |
Information Security Division | Information Security Risk | Specific systems outsourced / insufficient backup operations, managed information service systems not updated with patches, abnormal network connections with outsourced services, supplier platform management program errors |
|
Information HQ Risk Management Team | Operational Interruption Risk | - | - |
Human Resources Division |
Human Resources Risk Facility Risk
|
- | - |
Occupational Safety and Health Section | Occupational Safety and Health Risk | - | - |
Ethical Corporate Management Promotion Team | Integrity Management Risk | - | - |
General Administration Division |
Strategic Risk
Legal Risk
|
-
High penalties for breach of confidentiality in specific contracts
|
-
|