S-OIL

S-OIL maintains a stable financial structure through efficient financial management and optimized financing in response to rapid changes in its business environment. The Company protects investors and contribute to the national economy through balanced performance distribution, responsible tax compliance, and transparent management information disclosure.

S-OIL closely monitors key indicators of financial soundness and develops and implements measures as necessary to maintain a stable financial structure even in a rapidly changing business environment. The Company regularly forecasts future cash flows in order to obtain necessary funding in a timely manner while minimizing unnecessary borrowing. In 2022, S-OIL maintained financial integrity with an adequate level of liquidity by implementing the company-wide profit improvement activities, efficiently managing working capital, and avoiding unnecessary budget execution. In addition, the Company retained excellent credit ratings and actively communicated with domestic and foreign credit rating agencies to ensure that its excellent financial flexibility, potential financial support from parent company, Saudi Aramco, and strategic importance of its business was taken into consideration in credit ratings.

In February 2022, S-OIL issued corporate bonds worth KRW 230 billion at competitive terms thanks to its excellent credit ratings and by actively attracting investors. Of these bonds, 10-year bonds worth KRW 60 billion were issued as ESG bonds (green bonds), and they were certified as Green 1, the highest ESG certification grade, by NICE Rating. In addition, with the final investment decision in November 2022 for the Shaheen Project to secure future growth engines, the Company has developed an optimized financing plan for the project based on well-thought-out financial policies.
S-OIL maintains a stable capital structure by minimizing borrowings through efficient working capital management and timely financing at competitive terms.

S-OIL is committed to delivering maximum value to its long-term shareholders by returning its performance in a balanced manner to shareholders, taking into account maintaining financial soundness, securing future growth engines, and returning profits to shareholders. In November 2021, S-OIL announced its dividend guidance, stating that the Company would maintain its dividend payout ratio at approximately 30% of net income for the 2021 - 2022 fiscal year. In 2022, S-OIL paid a dividend of KRW 5,500 per share to common stock and KRW 5,525 per share to preferred stock including interim dividends, in consideration of financial performance and soundness for the financial period.

In order to efficiently use limited resources, S-OIL sets and executes its budget carefully. The Company strives to prevent unnecessary items being budgeted and to draw up a budget organically linked to its management policy and strategy, and budget execution is also subject to a thorough review by the budget control team. In particular, in 2022, despite the unavoidable rise in costs due to rapid inflation and soaring electricity price, S-OIL curbed unnecessary budget execution and reduced costs as much as possible through careful review. In 2023, it is making company-wide efforts to reduce costs by checking all expense items for necessity and feasibility and budgeting to minimize cost increments in order to respond to the uncertain business environment.
S-OIL will continue to improve the efficiency of resource allocation and budget management through systematic and objective budgeting using the zero-based approach and strengthening the economic analysis of cost and capital expenditure execution.

S-OIL takes it as an important responsibility as a respected corporate citizen to contribute to the national economy and social development through faithful tax payments. In accordance with its own tax policy, S-OIL observes the regulations, maintains an honest and transparent relationship with the taxation authorities, and dutifully pays taxes. In addition, corporate tax, deferred tax and effective tax rates are reported in detail through an audit report of independent auditors, and disclosed to the public through the electronic disclosure system of the Financial Supervisory Service.

In order to uplift investor confidence and comply with disclosure regulations, S-OIL closely monitors the enactment and amendment of relevant regulations, and provides public disclosure training to employees once a year, taking extra care to prevent any omissions or delay in disclosure. In addition, the Company distributes new and revised regulations, and reference materials that classify important disclosure items to all employees, while faithfully completing the annual training required of employees who are accountable and responsible for disclosures.
In 2022, through this strict compliance with disclosure rules, S-OIL provided its management information transparently to shareholders and investors by making a total of 62 public disclosures, including voluntary disclosures, with no disclosure breach. In recognition of these strict disclosure compliance efforts, its disclosure officer was recognized by the Korea Exchange for outstanding disclosure practice in the Securities Market in 2022. Also in 2023, S-OIL will continue to provide relevant training for employees to have the public disclosure mindset, and continue to make timely and legitimate disclosures.

S-OIL actively engages in investor relations activities to provide shareholders and investors with management information in a transparent manner and enhance corporate value. Every year, the Company surveys analysts about their satisfaction with its IR activities and then incorporate their feedback to improve the quality of IR activities. In 2022, for domestic and foreign investors, S-OIL held four earnings releases and eight face-to-face/non-face-to-face non-deal roadshows (NDRs) at home and abroad, attended 11 large-scale domestic and international conferences organized by securities firms, and held 328 meetings with domestic and foreign investors, all of which helped the Company transparently communicate its business information to stakeholders through active IR activities.
Moreover, following the final investment decision for the Shaheen Project, which is the core pillar of its future growth strategy, the Company organized a project briefing session for stakeholders to communicate in detail its business case, core competitiveness, and financing plan.
Going forward, S-OIL will continue to make utmost efforts to communicate with stakeholders its vision and efforts to respond to the rapidly changing business environment and achieve sustainable growth.

Recognizing the importance of cyber risk management, S-OIL has established its security management system based on the NIST Cybersecurity Framework, a global cybersecurity standard, and ISMS-P, a domestic standard, and is working to improve its cybersecurity posture by continuously implementing a series of improvement activities to enhance its cybersecurity maturity level.
In order to remain vigilant and responsive to increasingly sophisticated cyber threats, the Company is proactively employing the latest security technologies to strengthen the protection of its information systems (IT) and factory control systems (OT).

At S-OIL, Chief Information Security Officer (CISO) organization functions as a dedicated organization for company-wide cybersecurity, and the Cybersecurity Management Committee chaired by the CISO has been expanded to four times a year from twice previously, to review major policies and action plans related to cybersecurity and respond to the risk of cybersecurity breaches. In 2022, the Company also updated its regulatory framework on cyber risk management, supply chain security, and cloud security to ensure proper response to the latest cyber security trends and laws.
As the Company recognizes the importance of employees' understanding of cybersecurity, S-OIL conducts various education, training, and promotional activities to raise awareness.
The Company conducts mandatory cybersecurity training for all employees at least once a year, and malicious email response drills on a monthly basis to better respond to the risk of important data leakage through malicious emails. S-OIL also publishes cybersecurity newsletters every month to all employees, covering latest cyber threat information and incident cases, to improve employees' interest and awareness of cybersecurity. In 2022, the Company carried out personal information breach response drills using actual incident cases to familiarize employees with their roles in handling incidents, thereby minimizing the impact of possible breaches. Further, an annual company-wide cybersecurity compliance check is conducted to assess the vulnerabilities of its systems in operation and the daily activities of employees to enhance its security posture, and S-OIL makes it sure to develop and implement an action plan for the areas for improvement identified.

On the technical front, S-OIL deployed AI-based global specialized control solutions and hired experts in 2022 to enable faster and more accurate threat detection and response than ever before. For efficient response to Advanced Persistent Threat (APT) and unknown malware, in particular, the Company operates security equipment dedicated to responding to APT attacks, as well as solutions that detect abnormal behavior on user PCs in real time to improve responsiveness to unidentified malware. In addition, S-OIL runs in place solutions that block unauthorized file modification/tampering and malicious files from internal and external web services, such as the Company's homepage.

To ensure physical security, S-OIL's major IT systems are operated in a data center equipped with one of Korea's best security solutions, safeguarding its IT assets from physical intrusions from outside through constant monitoring.

In 2021, S-Oil became the first refiner in Korea to obtain the ISMS-P certification, which integrates the Information Security Management System (ISMS) and Personal Information Management System (PIMS), and in 2022, it passed the post-certification audit to maintain the ISMS-P certification.

In compliance with the Personal Information Protection Act and to minimize the risk of customer information leakage, S-OIL disposes of all sensitive personal information such as resident registration numbers immediately after achieving the purpose of use. Under the responsibility of the CISO, the Company is revamping relevant policies and processes so as to minimize handling of personal information, and monitoring in real time the status of customer data as well as changes to the database.
Furthermore, in cases where personal information is shared to an outsourcing partner for the purpose of operating the bonus card system, S-OIL uses a solution that sets the expiry date for the third-party use of such information and deletes it immediately upon expiry, thereby keeping the risk of personal information leakage involving an outsourcing company to minimum.

In order to manage customers' personal information more securely, S-OIL stores all personal information encrypted at all times, implements control access through the personal information access control system, and systematically monitors access history accordingly. S-OIL effectively limits personal data access on an as-needed basis by allowing access rights only to staff-in-charge requiring personal data access for their work. Furthermore, access can only be made through the Virtual Desktop Infrastructure system that separates Internet and internal business networks or the Server Based Computing system that blocks Internet connectivity, thereby minimizing potential risk of customer information leakage. Additionally, system access authorization is exclusively granted with two-factor authentication requiring both password and OTP.

S-OIL provides all employees and contractors' employees who handle customer personal information with periodic privacy protection training at least twice a year. The Company also conducts an annual audit for randomly selected teams and systems to check the status of personal information processing. In particular, S-OIL has established a hotline for employees to immediately report suspicious situations related to information leakage if they witness or recognize them, and also operates internal procedures for systematic investigation.

By proactively supporting and managing its suppliers to ensure that they have the capabilities for sustainable development, S-OIL strives to minimize risks caused by its suppliers, while also providing new business opportunities for the Company and its suppliers to develop together.

Since 2013, S-OIL has introduced advanced purchasing processes such as auto-invitation and blind-bidding to dramatically improve the transparency, objectivity, and fairness of its purchases. Procurement of goods and services is initiated through automatically inviting all suppliers who joined each sourcing group (SG) after preliminary reviews of the Contracting Committee in accordance with the auto-invitation procedure. S-OIL then selects contractors through Blind-Bidding, where the e-Procurement system automatically carries out the quotation process. Through the advanced purchasing process, S-OIL operates the process of selecting contractors more transparently and fairly, and upgrades its procurement process through continuous communication with suppliers.

In order to establish a stable supply chain through mutually beneficial cooperative relationships where suppliers and the Company grow and prosper hand in hand, S-OIL has been operating the Supplier Relationship Management (SRM) system since 2010. Under this system, a comprehensive evaluation of suppliers, including objective credit ratings by Korea Evaluation Data (KoDATA) and performance evaluations of suppliers' supply records, is conducted annually. Based on the results of the comprehensive evaluation, the Company has selected nine excellent suppliers (five for materials and four for services) and awarded them with excellent supplier certificates since 2019 to pursue a long-term mutually beneficial relationship in which suppliers can be proud of and grow altogether.

S-OIL has set "zero safety and environmental accidents" and " ethics management" as its sustainability management targets for suppliers, and has systematically managed to achieve them. The Company evaluates the fundamental capabilities of its suppliers, such as financial stability and technical capabilities, as well as their ESG aspects, such as ethics, interests with employees, safety, and the environment, and grant bidding opportunities only to those who pass the evaluation. The results of such supplier sustainability management, as well as issues and remedial measures discovered in the process, are reported to the quarterly ESG Steering Committee.

To this end, in 2022, S-OIL laid out the "Supplier ESG Code of Conduct" and urged its suppliers to adhere to it, while conducting an ESG self-assessment survey on 1,227 suppliers registered in its SG, analyzing and explaining the data to help them understand their level of ESG competence and understand the importance of strengthening their ESG capabilities. The Company is also continuously reviewing its purchasing processes to ensure that the requirements of the Supplier ESG Code of Conduct are reflected in its purchasing processes and that ESG requirements, both internal and external, are fully considered.

In 2022, S-OIL conducted ESG third-party assessments through KoDATA for 115 key suppliers, of which 10 suppliers also received on-site inspections by ESG experts and its purchasing staff. For 10 key suppliers that are considered necessary to build a sustainable supply chain with the Company, S-OIL provided safety consulting, including obtaining KOSHA-MS safety certification, to strengthen their safety capabilities as part of their ESG management. Over the coming years, the Company will continue to assess and improve the ESG capabilities of its suppliers.

Additionally, the Company's suppliers are required to sign and comply with the Ethics Compliance Pledge for Suppliers and Bidders. To underline the importance of compliance with the Ethics Code, S-OIL invites its suppliers every year since 2013 to provide education on the Company's transparent and objective procurement system and ethical regulations for suppliers, as well as to check their compliance with the Ethics Code. In 2022, S-OIL switched the supplier invitation program to a virtual program due to the COVID-19 pandemic, whereby the Company produced and distributed educational materials consisting of purchasing procedures, e-Procurement system user manuals, and ethics management to suppliers.