Most of what I did was confidential, so cannot be described in detail, but responsibilities included:
  • Risk identification, communication and mitigation
  • Controls development and rollout support
  • Staff training, awareness and education
  • Advice on specific questions and problems
  • Incident and consequence management
  • Due diligence (suppliers, mergers and acquisitions, other counterparties)
  • Compliance monitoring and assurance
  • Remediation.
My team scope covered all countries with a Downstream (distribution, refining, marketing, sales) presence, more than 60 countries with employees, many more with agents. Businesses included Manufacturing, Retail, Commercial, Chemicals, Supply & Distribution, Oil Sands and Finance, Procurement and IT. Responsibilities included businesses operated by Shell, non-operated joint venues (more than 150) and franchisees.

During my six years in role, through commitment, outreach, clarity and some luck, the businesses I supported experienced no material externally reportable events (though we had to deal with situations predating my appointment).
Copyright © 2023