Independent Assurance Statement

Similar documents
If you have any questions regarding this survey, please contact Marcell Reid at or Thank you for your support!

Environmental, Health and Safety Performance Data Third-Party Assurance

Reviewed by ADM(RS) in accordance with the Access to Information Act. Information UNCLASSIFIED.

ACCREDITATION COMMISSION FOR CONFORMITY ASSESSMENT BODIES

_isms_27001_fnd_en_sample_set01_v2, Group A

Disclosure Guidance for Integrated Companies in the Technology & Communications Sector

Scheme Document. For more information or help with your application contact BRE Global on +44 (0) or

IBM Corporation. Global Energy Management System Implementation: Case Study. Global

ACCREDITATION COMMISSION FOR CONFORMITY ASSESSMENT BODIES

REINVENTING ETHICAL, SUSTAINABLE SUPPLY CHAINS

C22: SAS 70 Practices and Developments Todd Bishop, PricewaterhouseCoopers

BPS Suite and the OCEG Capability Model. Mapping the OCEG Capability Model to the BPS Suite s product capability.

PROTERRA CERTIFICATION PROTOCOL V2.2

BRE Global Limited Scheme Document SD 186: Issue No December 2017

Position Description IT Auditor

Summary of Consultation with Key Stakeholders

CORPORATE RESPONSIBILITY PERFORMANCE BY COUNTRY GREECE

Modern slavery and human trafficking statement 2017

The Accreditation and Verification Regulation - Verification report

"Charting the Course... Certified Information Systems Auditor (CISA) Course Summary

Leadership and Innovation to Every Building Greener THREE-YEAR STRATEGIC DIRECTION TO 2019

IT Attestation in the Cloud Era

CitiManager. Registering for CitiManager, Enrolling in Paper-Free Statements, and Viewing Your Electronic Statement

Texas Reliability Entity, Inc. Strategic Plan for 2017 TEXAS RE STRATEGIC PLAN FOR 2017 PAGE 1 OF 13

STAFF REPORT. January 26, Audit Committee. Information Security Framework. Purpose:

ISO / IEC 27001:2005. A brief introduction. Dimitris Petropoulos Managing Director ENCODE Middle East September 2006

CARBON FOOTPRINT MONITORING THROUGH INNOVATION

CHARTER OUR MISSION OUR OBJECTIVES OUR GUIDING PRINCIPLES

Requirements for Certification Bodies

Set and Mobile Alert Messaging

ASSEMBLY 37TH SESSION

ADVANCED AUDIT AND ASSURANCE

Federal Government. Each fiscal year the Federal Government is challenged CATEGORY MANAGEMENT IN THE WHAT IS CATEGORY MANAGEMENT?

Strategic Transport Research and Innovation Agenda - STRIA

CitiManager Alerts

TEL2813/IS2820 Security Management

Strategic Plan for years Updated - 8/9/14 Review & re-approved

Public Safety Canada. Audit of the Business Continuity Planning Program

Chapter 8: SDLC Reviews and Audit Learning objectives Introduction Role of IS Auditor in SDLC

Information Security Continuous Monitoring (ISCM) Program Evaluation

Roadmap for Reducing Carbon Emissions. Beth Kujan Account Manager, Supply Chain Americas Speaking to inemi Sustainability Session

Period from October 1, 2013 to September 30, 2014

Executive Order & Presidential Policy Directive 21. Ed Goff, Duke Energy Melanie Seader, EEI

Corporate Responsibility at Tieto. Overview

BUSINESS CONTINUITY MANAGEMENT PROGRAM OVERVIEW

Manager, Infrastructure Services. Position Number Community Division/Region Yellowknife Technology Service Centre

SERVICE ORGANIZATION CONTROL (SOC) REPORTS: WHAT ARE THEY?

Framework for Improving Critical Infrastructure Cybersecurity

CYBERSECURITY FOR STARTUPS AND SMALL BUSINESSES OVERVIEW OF CYBERSECURITY FRAMEWORKS

HPE Energy Efficiency Certification Service

WRI BUILDING EFFICIENCY INITIATIVE BUILDING EFFICIENCY INITIATIVE, WRI ROSS CENTER FOR SUSTAINABLE CITIES

ISO/IEC INTERNATIONAL STANDARD. Information technology Software asset management Part 1: Processes and tiered assessment of conformance

What Makes PMI Certifications Stand Apart?

Section Qualifications of Audit teams Qualifications of Auditors Maintenance and Improvement of Competence...

M&A Cyber Security Due Diligence

Interpretations for the SFI Standards and Rules. January 2017

J.Enhancing energy security and improving access to energy services through development of public-private renewable energy partnerships

EGF - Eduard G. Fidel GmbH

Information for entity management. April 2018

Audit of Information Technology Security: Roadmap Implementation

ERO Enterprise Strategic Planning Redesign

Standards Readiness Criteria. Tier 2

Mitigation Framework Leadership Group (MitFLG) Charter DRAFT

National Chain Company

PRESENTATION OVERVIEW

Red Hat Virtualization Increases Efficiency And Cost Effectiveness Of Virtualization

Information Technology Branch Organization of Cyber Security Technical Standard

Standard CIP Cyber Security Critical Cyber Asset Identification

HOW TO DO BUSINESS WITH Lockheed Martin. Copyright 2017, Lockheed Martin Corporation. All rights reserved 0000.PPT 8/8/2017 1

PMP Certification Program

CHAIR AND MEMBERS CIVIC WORKS COMMITTEE MEETING ON NOVEMBER 29, 2016

Qualification details

Green Squared Certification Manual

MNsure Privacy Program Strategic Plan FY

Standard CIP Cyber Security Critical Cyber Asset Identification

Cyber Security Reliability Standards CIP V5 Transition Guidance:

POSITION DESCRIPTION

Aluminium Stewardship Initiative

SOC for cybersecurity

STATEMENT OF ASSURANCE ON GRI INDICATORS Statement of assurance to the stakeholders of Telkom SA Limited

Corporate/Sustainment Alliance Networks

Cybersecurity Presidential Policy Directive Frequently Asked Questions. kpmg.com

Green IT (ICT) (Accredited by British Computer Society)

CPA National Accreditation Standards for the ACAF Program and Applied Courses. Effective: May 19, 2017

May Hands-on Guidance. Measurable Results. SUPPLIER EFFICIENCY PROGRAM

WECC Internal Controls Evaluation Process WECC Compliance Oversight Effective date: October 15, 2017

DJSI Data Reveals US Companies Environmental Performance

USA HEAD OFFICE 1818 N Street, NW Suite 200 Washington, DC 20036

The role of municipal government in preventing crime and building community safety

SOC Reporting / SSAE 18 Update July, 2017

Policy. Business Resilience MB2010.P.119

Legal and Regulatory Developments for Privacy and Security

Position Description. Engagement Manager UNCLASSIFIED. Outreach & Engagement Information Assurance and Cyber Security Directorate.

STRATEGY STATEMENT OF QUALIFICATIONS

EXAM PREPARATION GUIDE

ISSMP is in compliance with the stringent requirements of ANSI/ISO/IEC Standard

Overview of ABET Kent Hamlin Director Institute of Nuclear Power Operations Commissioner TAC of ABET

Updates to the NIST Cybersecurity Framework

ISACA Cincinnati Chapter March Meeting

Quality Assurance For Certifying Industry Partners

Transcription:

Independent Assurance Statement Scope and Objectives DNV GL Business Assurance USA, Inc. (DNV GL) was commissioned by Lockheed Martin Corporation (Lockheed Martin) to conduct independent assurance of its 2016 Sustainability Report ( the Report ), as published on the company s website at http://www.lockheedmartin.com/us/who-we-are/sustainability.html and to carry out an independent verification of select 2016 Global Reporting Initiative (GRI) indicators. Our assurance engagement was planned and carried out in accordance with AA1000 Assurance Standard (AA1000 AS), using DNV GL s VeriSustain methodology. VeriSustain is based on international assurance best practice including AA1000AS, International Standard on Assurance Engagements 3000 (ISAE 3000) and the Global Reporting Initiative (GRI) Sustainability Reporting Guidelines and draws from our experience as a leading third-party assurance provider. We understand that the reported financial data and information are based on data from Lockheed Martin s 10-K, which is subject to a separate independent audit process. The review of financial data taken from the 10-K is not within the scope of our work. We planned and performed our work to obtain the evidence we considered necessary to provide a basis for our assurance opinion. We were engaged to provide Type 2 moderate level assurance, which covers: Evaluation of adherence to the AA1000AS (2008) principles of inclusivity, materiality and responsiveness (the Principles); and The reliability of specified sustainability performance information along with related claims in the report including: o o o The 19 reportable performance indicators within Lockheed Martin s Sustainability Management Plan (SMP) that represent its five core issues: Business Integrity, Product Impact, Information Security, Employee Wellbeing, and Resource Efficiency; Twenty-one GRI Indicators: G4-17, G4-18, G4-19, G4-20, G4-21, G4-22, G4-23 G4-24, G4-25, G4-26, G4-27, G4-SO4, G4-LA6, G4-LA12, G4-EN3, G4-EN6, G4-EN8, G4-EN15, G4-EN16, G4-EN17 G4-EN19, G4-12; Energy use and greenhouse gas (GHG) Scope 1, 2, and 3 emissions, with and without Renewable Energy Credits (RECs), waste generated, and water use assertion. A high level of assurance would have required additional work at the headquarters and site level to gain further evidence to support the basis of our assurance opinion. We evaluated the performance data using the reliability principle. DNV GL Business Assurance USA, Inc. (DNV GL), 155 Grand Ave, Oakland, CA 94612

We followed the procedures as outlined in the VeriSustain protocol to complete the project. We used the Global Reporting Initiative (GRI) Quality of Information Principles (Balance, Clarity, Accuracy, Reliability, Timeliness and Comparability) as criteria for evaluating performance information, together with Lockheed Martin s data protocols for how the data are measured, recorded and reported. The assurance of energy, GHG emissions, waste generation and water use assertions were conducted to a limited level of assurance. GHG emissions were verified using the World Business Council for Sustainable Development (WBSCD)/World Resources Institute (WRI) greenhouse gas protocol. The organizational boundaries are all global sites under Lockheed Martin s operational control except where noted. All environmental footprint data were verified for the period between 1 November 2015 to 31 October 2016. All other data were verified for the fiscal year 1 January, 2016 31 December, 2016. Responsibilities of Lockheed Martin Corporation and of the Assurance Providers Lockheed Martin has sole responsibility for preparation of the Report. In performing our assurance work, our responsibility is to the management of Lockheed Martin. Our statement, however, represents our independent opinion and is intended to inform all Lockheed Martin s stakeholders. DNV GL was not involved in the preparation of any statements or data included in the Report, except for this assurance statement. This is our second year of providing assurance for Lockheed Martin. We adopt a balanced approach towards all stakeholders when performing our evaluation. DNV GL s assurance engagements are based on the assumption that the data and information provided by the client to us as part of our review have been provided in good faith. DNV GL expressly disclaims any liability or coresponsibility for any decision a person or an entity may make based on this Assurance Statement. Basis of our opinion A multi-disciplinary team of sustainability and assurance specialists performed work at headquarters and site level. We undertook the following activities: Review of the current corporate responsibility issues that could affect Lockheed Martin and are of interest to stakeholders; Review of Lockheed Martin s approach to stakeholder engagement and recent outputs; Review of information provided to us by Lockheed Martin on its reporting and management processes relating to the Principles; We conducted in-person and phone interviews at the corporate headquarters in Bethesda, MD as well as Rockville, MD with a selection of the senior directors and managers who are responsible for areas of management and stakeholder relationships covered by the Report. The objective of these discussions was to understand top level commitment and strategy related to corporate responsibility and Lockheed Martin s governance arrangements, stakeholder engagement activity, management priorities, and systems; We visited one site in Sunnyvale, CA. We were free to choose the site location. During the site visit, we met with human resources, and environmental, health and safety representatives. The review work on

site focused on ethics, diversity and inclusion, energy consumption, GHG emissions, waste generated, water consumption, security, and health and safety management; We assessed documentation and evidence that supported and substantiated claims made in the Report; We reviewed the specified data collated at the corporate level, including that gathered by other parties, and statements made in the Report. We interviewed managers responsible for internal data validation, reviewed their work processes, and undertook sample-based audits of the processes for generating, gathering, and managing the quantitative and qualitative sustainability data; Examined data and information to support the reported energy use, GHG, waste generated and water use assertions; Evaluated whether the evidence and data are sufficient to support our opinion and Lockheed Martin s assertions. We provided feedback on a draft of the report based on our assurance scope. In addition, the following methods were applied during the verification of Lockheed Martin s environmental footprint inventories and management processes: Review of documentation, data records and sources relating to the corporate environmental data claims and GHG emission assertions Review of the processes and tools used to collect, aggregate and report on all environmental data and metrics; Assessment of environmental information systems and controls, including: o Selection and management of all relevant environmental data and information; o Processes for collecting, processing, consolidating, and reporting the relevant environmental data and information; o Design and maintenance of the environmental information system; o Systems and processes that support the environmental information system. Performed sample-based audits of the processes for generating, gathering and managing the quantitative and qualitative environmental data; Examination of all relevant environmental data and information to develop evidence for the assessment of the environmental claims and assertions made; Confirmation of whether or not the organization conforms to the verification criteria. Findings On the basis of the work conducted, nothing came to our attention to suggest that the Report does not properly describe Lockheed Martin s adherence to the Principles of Inclusivity, Materiality, and Responsiveness. In terms of the reliability of performance data, nothing came to our attention to suggest that these data and claims have not been properly collated from information reported at operational level, nor that the assumptions used were inappropriate.

DNV GL can confirm that the Report is aligned with the core option based on GRI G4. Furthermore, in our opinion, the Report provides sufficient information for readers to understand Lockheed Martin s management approach to its most material issues and impacts. Observations Without affecting our assurance opinion, we also provide the following observations. Inclusivity: the participation of stakeholders in developing and achieving an accountable and strategic response to sustainability. Lockheed Martin maintains a wide range of mechanisms to engage stakeholders on how the company s values are embedded in its management of the five core issues within the SMP. This is evident in initiatives such as those that the company has undertaken to increase the capacity of its small and mid-size suppliers to develop their own effective ethics programs. There are clear channels for stakeholders across Lockheed Martin s value chain to inform the company of their expectations and concerns. During our review we saw examples of where Lockheed Martin s sustainability governance structure enables the integration of direct and indirect stakeholder feedback related to its Tier 1 and Tier 2 Sustainability Factors and emerging issues. The 2015-2016 review and update of the SMP through stakeholder consultation has helped further demonstrate that Lockheed Martin is addressing its most material issues both in the report content and its management approach. It is natural that the extent to which the Core Issues and Sustainability Factors are relevant to stakeholders at the local levels varies across the company. With the expansion of Lockheed Martin s global footprint as a result of the Sikorsky acquisition, we recommend that future reports should include a brief overview of how each of the Core Issues might be relevant and significant to stakeholders across the different regions and business segments where applicable. This can serve to reinforce to the report reader that case studies such as the Cyber Security Awareness Program in India are not unique within the company, but rather representative of how the company uses engagement at local levels to further SMP objectives. Materiality: identification of those issues, which are necessary for stakeholders to make informed judgments concerning the organization and its impacts. The Report addresses the most material issues facing the company and its stakeholders. Lockheed Martin used the outputs of the materiality process conducted in 2015-2016 to confirm the topics covered in the report. The Report provides clear insight into the methodology used to identify and prioritize the most material issues and how this update compares to the previous iteration of the SMP. The addition of Tier 1 and Tier 2 Sustainability Factors provides readers with a strong understanding of the issues that Lockheed Martin identifies as a high business priority and those that are continuously monitored by the company for any changes in degree of importance to business or stakeholders.

The update to the SMP, Sustainability Factors, and corresponding goals are drawn from an evidence-based process informed by global and sustainability megatrends along with sector and company-specific impacts and availability of resources. However, due to the sensitive and proprietary nature of the company s operations and sustainability data, Lockheed Martin is not able to fully disclose the internal goals and metrics used to track performance. In these instances, we recommend that Lockheed Martin develop proxy indicators to ensure that the publicly reported metrics measure characteristics and issues which are of interest to stakeholders. Last year we recommended that Lockheed Martin continue to expand the processes and systems for monitoring supplier adherence to the Code of Conduct. As a result of the materiality assessment, Supplier Conduct was identified as a Tier 1 factor under Business Integrity. In 2016, the company conducted a supplier survey to understand the state of the management systems and performance of its supply chain. The responses received from participating suppliers have informed an action plan for increased supplier engagement around supplier conduct and other environmental, social, and governance issues. Responsiveness: the extent to which the organization responds to stakeholder issues. During our review, we found evidence that Lockheed Martin engages and responds to stakeholders throughout the company s operations. The company continues to formalize its commitment to sustainability through actions such as elevating the lead sustainability executive to Senior Vice President of Internal Audit, Ethics, and Sustainability. This has resulted in increased visibility of the sustainability performance and ambition at the Board and Executive Leadership level as the sustainability program matures. The company has positioned itself to advance sustainable solutions throughout its operations and products by establishing a business case such as risk mitigation, competitive advantage, and talent attraction and retention for its sustainability initiatives. In our opinion, this will serve to further integrate sustainability in company decision-making processes. Performance Information: Lockheed Martin s reporting of performance including the disclosure of data is comprehensive and the performance indicators are disclosed in a balanced manner. As noted in last year s assurance statement, we recommend that Lockheed Martin describe the challenges they face in meeting performance goals, as well as the opportunities, to ensure that stakeholder s expectations are aligned with the operational context. Lockheed Martin provides a clear description of the boundaries and scope on the reported information. The tone of the Report is broadly neutral with no obvious and deliberate intent to unduly influence the reader. For the specified data presented in the report, minimal technical errors were identified during our sampling. Lockheed Martin applies multiple checks and balances on reported data and requires peer review or approval by management throughout the reporting year and before collection by the Sustainability team. Based on the processes and procedures conducted with a moderate assurance, there is no evidence that the GHG assertions and environmental footprint data are not materially correct and are not a fair representation of GHG

and environmental data and information and have not been prepared with the calculation method referenced above. Our review found evidence to support the below listed environmental data for Lockheed Martin s environmental reporting year 2016 (1 November 2015 to 31 October 2016): Energy o Total Energy Consumption: 8,173,216 MMBtu Greenhouse Gas Emissions o Scope 1 Emissions 229,149 MtCO2e o Scope 2 Emissions (location-based) 777,186 MtCO2e o Scope 2 Emissions (market-based) 575,096 MtCO2e o Scope 3 Emissions Purchased Goods 7,684,895 MtCO2e Fuel and Energy Related Activities (not included in Scope 1 and 2) 90,772 MtCO2e Capital Goods 369,078 MtCO2e Upstream Transportation and Distribution 70,968 MtCO2e Waste Generated in Operations 4,115 MtCO2e Business Travel 164,311 MtCO2e Employee Commuting 228,215 MtCO2e Use of Sold Products 21,986,322 MtCO2e REC Total: 300,000 MWh Waste Generated: 49,030,627 pounds Water Used: 1,159,000,000 gallons DNV GL Business Assurance USA Inc. Oakland, California June 22, 2017 Tom Gosselin Natasha D Silva Jon Woodhead Project Director Project Consultant Technical Reviewer -------------------------------------------------------------------------------------------------------------------------------------------------------- The purpose of the DNV GL group of companies is to promote safe and sustainable futures. The USA & Canada Sustainability team is part of DNV GL Business Assurance, a global provider of certification, verification, assessment and training services, helping customers to build sustainable business performance. www.dnvglsustainability.com