Analysis of Material Issues
The degree of impact of each impact topic and average probability of occurrence were calculated.
Negative impact: Negative impacts are catastrophic (irreversible), so negative impacts greater than Medium will be added to key impact topics.
Priority1 | Material Topic | Corresponding GRI standards and topic specific standards | Reasons for Materiality | Explanation of Differences | Boundaries of impact and degree of involvement in the value chain | ||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Internal Stakeholders | External Stakeholders2 | ||||||||||||
Scope of impact on value chain | Scope of impact on value chain/Cause of impact/Coverage of business activities3/Coverage of business activities4 | ||||||||||||
Upstream5 | TBB | Downstream6 | Upstream | Downstream | |||||||||
Employees | TBB | Shareholder | Suppliers/partners | Government | NGO/Charity groups | External consultants | Media | Customers | |||||
1 | Legal compliance |
|
The Bank complies with relevant laws and regulations, establishes management and control mechanisms, responds to relevant government policies, and implements policies strongly promoted by the government to prevent money laundering, combat financing of terrorism, and prevent fraud. We believe that proactive compliance with business-related laws and regulations is mandatory for the sustainable development of enterprises. | No change. | Direct | Direct | Direct | - | Indirect/Business operation/>50% | - | - | Indirect/Business operation/>50% | - |
2 | Information security |
|
The development of financial business depends on a stable information system and involves a large amount of business transactions and information retention. Information security systems and management strategies should be refined to effectively protect the rights and interests of the company and customers. | No change. | Direct | Direct | Direct | Business relationship/Supply chain/>50% | Indirect/Business operation/>50% | - | - | Indirect/Business operation/>50% |
Direct/Product, service/>50% |
3 | Risk management |
|
As the financial environment changes rapidly, technology advances, products and businesses become more complex, and emerging risks become more diversified, in order to effectively control the risks of the entire bank, the Bank has established an integrated risk management system and manages the rationality of risks and rewards on the basis of the statutory capital ratio, in order to achieve operational goals and effectively manage business risks and other risks, avoid business losses, and maintain the stability of the overall financial and economic structure. | No change. | Direct | Direct | Direct | Business relationship/Supply chain/>50% | Indirect/Business operation/>50% | - | - | - | Direct/Product, service/>50% |
4 | Privacy protection |
|
Financial industry operations can easily involve customer privacy. The Bank complies with the Personal Data Protection Act, established the privacy protection policy, and clearly defined the usage of customer personal data to ensure that customer information is not used illegally. | New material topic added. | Direct | Direct | Direct | Direct/Product, service/>50% | Indirect/Business operation/>50% | Direct/Product, service/>50% | |||
5 | Operational performance and resilience |
|
Business disruption may make customers encounter transaction difficulties and lose confidence, leading to lawsuits, credit rating downgrading, and negative impact on the rights of employees. Ensuring business continuity and enhancing financial stability may attract more business opportunities and increase stability of financial markets. | Order Adjustment. | Direct | Direct | Direct | Business relationship/Supply chain/>50% | Indirect/Business operation/>50% | - | - | Indirect/Business operation/>50% | Direct/Product, service/>50% |
6 | Corporate governance |
|
Good corporate governance is beneficial for optimizing the organizational operation and sustainable development, strengthening the stability and transparency of business operations, and enhancing the long-term value and competitiveness of enterprises, which is the foundation of business operations. | Order Adjustment. |
Direct | Direct | Direct | - | Indirect/Business operation/>50% | - | - | Indirect/Business operation/>50% | - |
7 | Investing and financing climate action |
|
Regarding risks and opportunities arising from extreme weather, natural disasters, energy crisis, and low-carbon economy transition, the Bank takes a practical approach and sets net-zero targets. The Bank actively enforces reduction of its own carbon emissions and adjust asset allocation in financing activities in an effort to strengthen climate resilience. TBB exercise the influence as a financial intermediary and combines its core competencies to promote ESG financing, ESG investing and related financial services. By guiding capital flows into sustainability projects, TBB hopes to guide industries, investors, and consumers to focus on sustainable development and advance toward a future of net-zero. | Order Adjustment. |
- | Direct | Indirect | - | Indirect/Business operation/>50% | - | Business relationship/Business operation/>50% | - | Direct/Product, service/>50% |
8 | Digital finance and innovation |
|
With the advent of the digital financial era, traditional financial products have been severely impacted. The Bank actively adopts digital innovation technologies to change the existing operating model, effectively improving the efficiency of financial services, reducing transaction costs and creating new business opportunities, so as to achieve the goal of sustainable operations. | Order Adjustment. | Direct | Direct | Direct | Business relationship/Supply chains/>50% | Indirect/Business operation/>50% | - | - | Indirect/Business operation/>50% | Direct/Product, service/>50% |
9 | Customer relationship |
|
The Bank is committed to fostering friendly and long-lasting customer relationships and enhancing customer satisfaction. By offering compliant and needs-oriented products and services, we aim to strengthen customer loyalty and maintain our competitive edge in the market. | New material topic added | Direct | Direct | Direct | Direct/Product, service/>50% | Indirect/Business operation/>50% | - | - | - | Direct/Product, service/>50% |
10 | Protection of workplace human rights |
|
Employees are the most valuable asset of the Bank. We are dedicated to creating a harmonious workplace environment and treating employees fairly while respecting diversity. This includes ensuring lawful working conditions, transparent communication channels, and equal opportunities for promotion. | New material topic added | Direct | Direct |
1 Priority order is based on dual materiality analysis.
2 External stakeholder groups impacted by the company's business activities, including the environment, society, customers and end users, and external employees (e.g. supply chains and contractors).
3 Business operations, products/services and/or activities or positions on the supply chain with external impacts.
4 Percentage of business operations, products/services and/or supply chain and other business activities included in the impact assessment.
5 Please see 1.2.2 Current Status - Activities, value chain, and other business relationships.
6 Please see 1.2.2 Current Status - Activities, value chain, and other business relationships.
Priority | Topics | Responsible Unit | Impact category and description | Policy | Commitments | Action |
---|---|---|---|---|---|---|
1 | Legal compliance | Corporate Governance Unit |
Actual and potential negative impact - Violation of legal regulations: |
Compliance is the responsibility of the Board, senior management, and all employees. | Familiarize every employee with laws and regulations and ethical guidelines relevant to their roles. |
Prevent potential negative impact:
|
2 | Information security | Customer Rights Unit |
Potential negative impact - Inadequate information security management: |
Compliance with the Cyber Security Management Policy | Ensure confidentiality, integrity, and availability of information and communication systems and IT assets and reduce business risk. | Prevent potential negative impact: Enforce the annual cyber security maintenance program. |
3 | Risk management | Corporate Governance Unit |
Potential negative impact - Inadequate risk management: |
To effectively manage risks of the entire bank, the Bank established guidelines including the "Risk Management Policy", the "Credit Risk Management Guidelines", the "Market Risk Management Guidelines", the "Operational Risk Management Guidelines", the " Interest Rate Risk in the Banking Book Management Guidelines", and the "Liquidity Risk Management Guidelines". All regulations and their related risk limits are approved by the Board of Directors (Managing Directors), among which the content of the Risk Management Policy is as follows: Establish a risk management mechanism for identification, measurement, supervision, control, information reporting, and response strategies, construct an integrated risk management system, adopt a business model guided by appropriate risk management, and control the rationality of risk and return under the statutory capital adequacy ratio to achieve operational objectives and enhance shareholder equity. It covers credit risk, market risk, operational risk, bank book interest rate risk, liquidity risk, management of other risks, and capital adequacy management. | Maintain adequate capital and achieve reasonable risk and return within the Bank’s credit risk tolerance. |
Prevent potential negative impact:
|
4 | Privacy protection | Customer Rights Unit |
Potential negative impact - privacy infringement: [People] Improper leaks of personal data of customers, employees, or other stakeholders, leading to infringement upon their privacy. |
Comply with the relevant laws and regulations of the Personal Data Protection Act to safeguard the rights and interests of customers. |
1. Established the "Taiwan Business Bank Personal Data Management Policy". 2. Implement the relevant laws and regulations of the Personal Data Protection Act and strictly prohibit the disclosure of customer information to outside parties. 3. A "Personal Data Protection Committee" is set up to establish personal data protection standards, including management measures for the collection, processing and use of personal data, and "Key Points for the Management of the Collection, Processing and Use of Personal Data" has been established. |
Preventing potential negative impact: In order to implement the protection and management of personal data, the Bank periodically conducts educational trainings to strengthen the promotion of related businesses rules and the expertise of business personnel. |
5 | Operational performance and resilience | Customer Rights Unit |
|
Establish the "Disaster Recovery Procedures for the Information Center of Taiwan Business Bank," "Information System Management Procedures for the Information Technology Department of Taiwan Business Bank," "Information Security and Maintenance Procedures for Taiwan Business Bank," and "Regulations Governing Operational Continuity of Information Systems for Taiwan Business Bank," and other related regulations. | Keep strengthening disaster response capabilities and build an adequate IT system backup mechanism for better disaster response. Restore the minimum acceptable level of service within the promised recovery time in case of a disaster in order to protect customers' rights. | Prevent potential negative impact and manage potential positive impact: Organize regular offsite IT center disaster recovery drills to verify the backup center's offsite recovery capacity. Perform business impact analysis on various threats in order to devise adequate backup measures to ensure business continuity during severe business disruption. |
6 | Corporate Governance | Corporate Governance Unit |
Potential negative impact - Inadequate corporate governance: |
Implement corporate governance guidelines to create a stronger corporate governance organization and system while enforcing corporate governance and ethical corporate management in order to protect stakeholders' rights and enhance Board effectiveness. | The Board of Directors follows the Articles of Incorporation, shareholders’ meeting resolutions, and laws and regulations to perform their duties, and create a mutually beneficial environment for the Bank and its stakeholders based on ethics and integrity as well as an emphasis on corporate governance. | Preventing potential negative impact: Promote board diversity and fulfillment of board member roles, and enforce business integrity and ethics as well as compliance training and build a culture of integrity. |
7 | Investing and financing climate action | Sustainable Finance Unit |
|
|
|
|
8 | Digital finance and innovation | Customer Rights Unit |
|
Utilize digital innovations to change existing business models and transform them into a customer value and experience oriented system to create new value and sustainable advantages for the Bank and achieve digital governance targets. | Develop more friendly and customer centric omnichannel financial services that emphasize user experience. | Prevent potential negative impact and manage actual and potential positive impact: Create more friendly and customer centric omnichannel financial services by utilizing innovative fintech and data to drive growth and implementing digital processes and channels to provide a revamped and better user experience. Combine social media and digital marketing to encourage customers to use online and mobile banking services as well as mobile payments. Meet the demand for mobile banking services and provide a more streamlined digital banking experience on different platforms. |
9 |
Customer relationship |
Customer Rights Unit |
|
To safeguard the rights and interests of customers, establish a comprehensive customer feedback mechanism for the financial services provided and comply with relevant laws and regulations. |
|
Prevent potential negative impact and manage potential positive impact:
|
10 | Protection of workplace human rights |
Employee Care Unit |
|
Committed to complying with relevant laws and regulations on labor rights, and following and supporting the spirit and basic principles of human rights protection set forth in international human rights conventions, such as gender equality, the right to work, and the prohibition of discrimination. |
Implement equal treatment in employee recruitment, promotion, and remuneration, and adopt a zero-tolerance attitude toward any form of discrimination. Relevant management policies and procedures are also formulated to provide diverse and safe complaint channels and to protect employees’ legitimate rights and interests from infringement. |
Prevent potential negative impact and manage potential positive impact:
|
Priority order | Topics | Assessment and goals | |||||
---|---|---|---|---|---|---|---|
Performance indicator | Year 2024 (Short term) goals |
2024 Progress | Year 2025 (Short term) goals |
2030 (Medium/Long term) goals |
|||
1 | Legal Compliance | KPI 1: Each department performs compliance self assessments | Twice a year. | Twice a year. | Twice a year. | Twice a year. | |
KPI 2: Training completion rate of "Compliance Officer Seminar" for compliance officers at banking and securities HO & branches | 100% | 100% | 100% | 100% | |||
KPI 3: Training completion rate of "AML/CFT Seminar" for banking and securities HO & branches | 100% | 100% | 100% | 100% | |||
2 | Information security | KPI 1: Completion rate of damage control or recovery within 36 hours after becoming aware of the following cyber security incidents:
|
100% | 100%(None of the cyber security incidents on the left occurred in 2024) | 100% | 100% | |
KPI 2: Purchase information security insurance every year | Purchase information security insurance | Coverage was purchased on November 1, 2023. | Renew coverage every year | Renew coverage every year | |||
KPI 3: Completion Rate of Cyber Security Awareness and Training | 100% | 100% | 100% | 100% | |||
3 | Risk Management | KPI 1: Compliance with the "Regulations Governing the Capital Adequacy and Capital Category of Banks" | The statutory ratio was met. | The statutory ratio was met. | The statutory ratio was met. | The statutory ratio was met. | |
KPI 2: Completion rate for conducting monthly meetings of the Risk Management Committee | 100% | 100% | 100% | 100% | |||
4 | Privacy protection | KPI 1: Regularly convene the "Personal Data Protection Committee" meetings | Convene 2 meetings annually | Meetings were held on April 9, 2024 and December 30, 2024 | Convene 2 meetings annually | Convene 2 meetings annually | |
KPI 2: Conduct personal data protection educational trainings regularly | Once a year | The "Personal Data Protection Laws and Regulations Educational training" course was held from October 1 through October 21, 2024 | Once a year | Once a year | |||
5 | Operational performance and resilience | KPI 1: Organize main IT center offsite disaster recovery drills | Twice a year. | The first half-year drill was completed on May 11, 2024, and the second half-year drill was completed on October 15 and 16, 2024. |
Twice a year. | Twice a year. | |
KPI 2: Core system recovery time | 4 hours | 4 hours | 4 hours | 4 hours | |||
6 | Corporate Governance | KPI 1: Board diversity | Female directors account for at least 1/5 of the Board | 2 female directors account for 2/15 of the Board | Female directors account for at least 1/4 of the Board | Independent directors and directors of either gender both account for at least 1/3 of the Board | |
KPI 2: Overall/Lowest individual average Board meeting attendance | 94%/82% | 98.6%/93.3% | 95%/82% | 95%/84% | |||
KPI 3: Conduct performance evaluation of the Board | Internal assessment Weighted average score: 93 |
Internal assessment Weighted average score: 98.3 |
Internal assessment Weighted average score: 94 |
Entrust an external professional organization to conduct the performance evaluation of the Board | |||
KPI 4: Business integrity and ethics, compliance training | 96% passing rate. | The online assessment for the second half of 2024 included ethical corporate management as a tested subject. All employees who initially failed have completed re-assessments and passed, resulting in a 100% pass rate. | 96.5% passing rate. | 97% passing rate. | |||
7 | Investing and financing climate action | KPI 1: Invest in sustainability-related bonds or related industries or products | Investment in sustainability-related bonds accounts for 5% of total bond investment. | Investment in sustainability-related bonds reached 7.56% of total bond investment | Investment in sustainability-related bonds reached 6% of total bond investment | Investment in sustainability-related bonds reached 7% of total bond investment | |
KPI 2: The ratio of attendance at shareholders' meetings of investee companies | 100% | 100% | 100% | 100% | |||
KPI 3: Coverage of corporate loan customers in new loans signing the Commitment for Fulfilling Corporate Social Responsibility | 90% coverage | 90.55% coverage | 91% coverage | 92% coverage | |||
KPI 4: Total green project loans disbursed for providing financing, assisting individual customers in improving and upgrading their equipment, and purchasing green buildings | NT$2 billion | NT$9 billion | NT$12 billion | NT$15 billion | |||
KPI 5: Balance of green financing loans (including green industries and green enterprises) | NT$173 billion | NT$185.534 billion | NT$178 billion | NT$183 billion | |||
KPI 6: Cumulative number of sustainability-linked loans | A total of 100 cases undertaken | A total of 102 cases undertaken | A total of 135 cases undertaken | A total of 170 cases undertaken | |||
KPI 7: Total loans approved for urban renewal and old building reconstruction | NT$90 billion in total loans approved |
NT$96.1 billion in total loans approved | NT$100 billion in total loans approved | NT$120 billion in total loans approved |
|||
KPI 8: Number of ESG themed funds launched | Cumulatively launched 6 funds |
Cumulatively launched 9 funds (Base Date: 2022, one of the funds was liquidated in July 2024) |
Cumulatively launched 7 funds | Cumulatively launched 12 funds | |||
KPI 9: Coverage of credit cards made of environmentally friendly materials | 28% coverage | Coverage of environmentally friendly cards reached 29.6% 50,408 credit cards (total number of environmentally friendly cards issued at end of December) /170,427 (total number of cards in circulation at end of December) |
29% coverage | 29% coverage | |||
KPI 10: Fill out the CDP questionnaires for climate change | Rated B (management level) | Rated A- (leadership level) | Rated B (management level) | Rated A- (leadership level) | |||
KPI 11: Perform TCFD analysis and publicly disclose key information | Completion rate 100% | Disclosed with 100% completion | Completion rate 100% | Completion rate 100% | |||
KPI 12: Organize third party certification of TCFD report | Completion rate 100% | Organized with 100% completion | Completion rate 100% | Completion rate 100% | |||
KPI 13: Introduce PCAF methodology to investigate carbon emissions from investing and financing in Scope 3 Category 15, and establish a financial carbon emissions accounting mechanism | Completion rate 50% | Implemented with 100% completion | Completion rate 75% | Completion rate 100% | |||
KPI 14: Complete setting SBT targets | Completion rate 50% | Submitted with 50% completion | Completion rate 100% | Completion rate 100% | |||
8 | Digital finance and innovation | KPI 1: Total number of digital financial patents received. | 55 | 76 | 65 | 75 | |
KPI 2: Number of transactions made using Taiwan Pay QR Code | The number of new transactions to reach 2.3 million | The number of new transactions reached 2.84 million | The number of new transactions to reach 2.40 million | The number of new transactions to reach 2.50 million | |||
KPI 3: Number of online service transactions | The number of new transactions to reach 16.4 million | The number of new transactions reached 16.74 million | The number of new transactions to reach 16.9 million | The number of new transactions to reach 19.6 million | |||
KPI 4: Total number of accounts opened online | 150,000 accounts | 179,000 accounts | 180,000 accounts | 330,000 accounts | |||
KPI 5: Number of online loan applications | 4,000 new online loan applications | 12,016 new online loan applications | 4,800 new online loan applications | 12,000 new online loan applications | |||
9 | Customer relationship | KPI 1: Customer satisfaction surveys | Customer satisfaction to reach 90% | 92% | Customer satisfaction to reach 90% | Customer satisfaction to reach 90% |
|
KPI 2: Conduct legal compliance and risk assessment works | Once a year | Completed the legal compliance and risk assessment and submitted a report to the Financial Supervisory Commission for record on April 23, 2024 | Once a year |
Once a year |
|||
KPI 3: To rank among the top 25% list in the Financial Supervisory Commission's "Principle for Financial Service Industries to Treat Clients Fairly" evaluation | To rank among the top 25% list in the Financial Supervisory Commission's "Principle for Financial Service Industries to Treat Clients Fairly" evaluation | Ranked 50 - 75% list in the Financial Supervisory Commission's "Principle for Financial Service Industries to Treat Clients Fairly" evaluation | Continue to rank among the top 25% list in the Financial Supervisory Commission's "Principle for Financial Service Industries to Treat Clients Fairly" evaluation |
Continue to rank among the top 25% list in the Financial Supervisory Commission's "Principle for Financial Service Industries to Treat Clients Fairly" evaluation | |||
10 | Protection of workplace human rights | KPI 1: Risk value of the occurrence rate of “illegal encroachments in the line of duty” | ≤0.15% | 0% (No occurrence) | ≤0.14% | ≤0.12% |
|
KPI 2: Risk value of occurrence rate for confirmed sexual harassment complaint cases | ≤0.15% |
0% | ≤0.14% | ≤0.12% |
|||
KPI 3: Percentage of women in related STEM positions | ≥34% | 35.28% | ≥35% |
≥37% | |||
KPI 4: Rate of new employees receiving gender equality training courses | ≥95% |
100% |
≥95% | ≥95% |