Risk management and mitigation are embedded in Husky’s strategic planning and operational processes. Identifying risks, measuring competency, training personnel and purchasing equipment are guided by policies, standards, processes and best practices.

Enterprise Risk Management

The Corporate Risk Management Standard outline Husky’s approach to assessing and managing risks.

The Enterprise Risk Management program employs a risk matrix with seven probability factors and a scale of the severity of events to identify and assess potential hazards and risks that could impact the health and safety of people, property and the environment. This analysis provides greater certainty for shareholders, customers and suppliers that risks are well managed, and leads to increased confidence in the communities where Husky operates.

At least twice a year, the Corporate Risk Management group undertakes an internal assessment to better identify and manage risk, understand the risk drivers and promote a culture of risk awareness. The assessment determines who is accountable for the management and mitigation of each risk and identifies any emerging issues. The potential financial, health, safety, reputational and environmental impacts of each risk are assessed, with critical risks reported to the Board of Directors.

Emergency Preparedness

Husky’s established processes, Emergency Response Plans (ERPs) and training exercises are designed to guide a consistent and effective response to any event which could affect employees, contractors, the community, the environment and/or the Company’s assets and reputation.

A 24-hour emergency phone line provides members of the public, emergency responders and customers with immediate access to information, and allows staff to promptly initiate a response. The number is posted on www.huskyenergy.com, on signs at all facilities and is part of all public notification material.

Preparedness

Regular cross-departmental exercises, and consistent, repeatable processes are an integral part of being prepared for, and improving the response to, an emergency. Where appropriate, coordination with third-party emergency responders is tested in major exercises.

Site-specific hazard identification and planning, equipment sourcing and training enhance readiness at facilities where there is the potential for a higher-consequence event.

Husky participates in additional training as an active member of spill cooperatives and preparedness programs.

Response

Emergency response programs are tailored using area-specific hazard and risk assessments, evaluating local response requirements to determine the training and equipment needed for individual emergency response teams. These teams are supported by local management and a multi-discipline corporate emergency response team.

The Company bases its plans and procedures on the Incident Command System, a standard emergency response model used in Canada and internationally to provide an effective response across all operations. It focuses the response so that the most important actions are addressed in priority and under clear accountabilities.

Husky reviews and tests all ERPs at least once a year. In 2016, 45 emergency response plans were being managed.

Business Continuity

Husky develops business continuity plans to mitigate impacts should a business-interrupting event occur. Critical processes are identified for each business unit.

Plans for individual departments are updated and tested to validate information, confirm contingency strategies and prepare staff. Areas with more critical processes are tested every year, those with less critical processes every two years. Exercises are often conducted with multiple departments to improve efficiencies and identify any gaps in the process.

The business continuity program is re-evaluated regularly based on the criticality of business activities and potential consequences, and compared to industry best practices.

Code of Business Conduct

In accordance with Husky’s Code of Business Conduct, employees are expected to conduct themselves in an ethical manner, with a high degree of personal integrity. Employees take mandatory training so that they are aware of their responsibilities.

Ethics Help Line

Husky has a confidential and anonymous Ethics Help Line where employees, contractors and other stakeholders can report perceived breaches of the Code of Business Conduct.

The Ethics Help Line is managed by EthicsPoint, an independent service provider. Callers can choose to provide information anonymously. The information provided is submitted to the Ethics Help Line Committee, which includes representatives from the legal, audit, security, health, safety, environment and human resources departments.

Delivering Results

The Company conducted about 150 exercises to better prepare for emergencies, while multi-department business continuity exercises confirmed contingency strategies and ensured staff are prepared.