Risk Management

 

Risk Management Vision

Driven by the vision to become the top choice for customers and play a pivotal role in the global shipping industry, Yang Ming is committed to sustainable operations and responsibilities by developing a comprehensive risk management mechanism to identify and mitigate potential operational and financial risks. Through rigorous controls, Yang Ming keeps business risks within acceptable levels while enhancing overall operational quality and value.

 

Risk Management Organizational Structure and Three Lines of Defense

Yang Ming’s risk management organizational structure comprises the Board of Directors, the Sustainable Development & Risk Management Committee, the Audit Department, the Risk Control Office, and all operating units

Organization Responsibilities
Board of Directors
  • Approve the Company’s risk management policy and procedures.
  • Ensure an appropriate risk management mechanism and risk management culture are established.
  • Oversee and ensure the effective operation of the overall risk management mechanism.
  • Provide adequate resources to support the effective operation of risk management.
Sustainable Development & Risk Management Committee
  • Review the Company’s sustainable development and risk management policies, annual plans, systems, regulations, strategies and related matters.
  • Review and provide advice on the Company’s response measures for major sustainable development and risk-related matters, issues and cases.
  • Review, monitor and revise the implementation status and effectiveness of sustainable development and risk management, propose necessary improvement recommendations, and report regularly to the Board of Directors.
Audit Department
  • Formulate the annual audit plan based on risk assessment results.
  • Review whether the Company’s risk management processes and corresponding risk response measures remain effective continuously based on the annual audit plan and ad-hoc case requirements, and regularly report audit results to the Board of Directors.
Risk Control Office
  • Formulate risk management policies.
  • Plan and implement risk identification, assessment, and measurement, and establish risk management mechanisms.
  • Report the results of risk management implementation.
  • Implement and assist in the management of project-specific risk items.
  • Conduct risk management training.
  • Handle other risk control matters.
Operating Units
  • Each operating unit shall be responsible for identifying, analyzing, evaluating, and responding to risks within its respective operations, and establish relevant crisis management mechanisms when necessary.
  • Regularly report risk management information to the Risk Control Office.
  • Ensure the effective implementation of risk management and related control procedures within their respective units.


risk management

Three Lines of Defense in Risk Management

First Line of Defense
Operating Units
Third Line of Defense
Risk Management Units
Second Line of Defense
Auditing Unit
  • Identify and assess operational risks
  • Monitor the implementation of risk control across units.
  • Assist operating units, when undertaking major capital expenditures, in incorporating risk management standards and procedures into product and service development processes to ensure compliance with the internal control system and operating procedure manuals.
  • Oversee and review
 

Risk Management Policy and Procedures

Yang Ming’s Board of Directors passed a resolution at its 411th meeting on March 12, 2026 to formulate the “Risk Management Policy and Procedures” as the primary guidelines for risk management criteria and standard procedures.
Yang Ming’s risk management procedures encompass risk identification, risk analysis, risk assessment, risk response, and risk monitoring. The Risk Control Office identifies risk items that may influence Yang Ming annually, analyzes their potential frequency and severity of loss, and then formulates and assesses countermeasures. Yang Ming not only assesses potential risk impacts through cross-department communication and data consolidation, but aligns potential risk impacts with its short-term, medium-term, and long-term operational goals
. In accordance with internal audit requirements and standards, Yang Ming monitors potential risks continuously and implements response measures to control all types of risks on an ongoing basis.

Risk Management Procedures
Risk Identification Identify potential risk events that may cause failure to achieve company goals, result in losses, or cause negative impacts, based on Yang Ming’s strategic objectives, business responsibilities, internal and external risk factors, and stakeholders’concerns.
Risk Analysis Understand the nature and characteristics of identified risk events, analyze their frequency and severity, and thereby calculate the risk value.
Risk Assessment and Response Map the risk analysis results to risk levels and prioritize risk events based on materiality principles to serve as the basis for subsequent response measures.
Risk Monitoring Operating units implement risk management and control to ensure day-to-day risk monitoring. The Risk Control Office formulates risk management policies and monitoring mechanisms, as well as periodically consolidating and tracking the implementation of risk control measures across all units. In conjunction with annual internal and external audits, the Audit Office reviews the effectiveness of risk management process and corresponding risk measures, and reports audit results to the Board of Directors.

Risk Management Implementation Status

 

Group Annual Risk Assessment Results

To implement risk management mechanisms, Yang Ming conducts group-wide risk identification and assessment annually, which is reviewing and assessing potential risk items, frequency of occurrence, and severity of impact in accordance with five major risk categories—strategic risk, operational risk, financial risk, compliance risk, and climate change risk. The assessment incorporates past operating performance, recent news, relevant research reports and data, as well as outlooks published by various external institutions and impacts of major international developments and policy shifts, and is conducted based on risk assessment forms, interviews with internal operating units, current operating conditions, and relevant external reports.
The results of the Group’s 2026 risk assessment were reported to Yang Ming’s Sustainable Development and Risk Management Committee at its 16th meeting on July 29, 2026, and the Board of Directors at its 414th meeting on August 12, 2026. A total of 61 units were assessed, including headquarters, Keelung, Taichung and Kaohsiung branch offices, subsidiaries, and regional centers. The assessment encompasses multiple dimensions, including operational activities, regulatory compliance, climate change, international geopolitics, and information security. Following internal interviews and the consolidation of external information, a total of 24 major risk items were identified, among which 4 items were classified as having a high-level of residual risk.

risk matrix
Note:The risk matrix disclosed only risk items rated as high and above (inclusive). Remaining medium and low-level risk items are continuously monitored and managed in accordance with Yang Ming's risk management procedures.


High Level Risk Items

Risk Source /
Risk Items
Potential Impacts Mitigation Measures
Strategic Risk:
International Geopolitical Risks
  1. Geopolitical risk is not merely a standalone risk source, but is also regarded as a “risk multiplier” that continues to amplify market volatility, operational uncertainty, and supply chain pressures.
  2. The interaction of wars, sanctions, trade barriers, and regulatory disparities makes individual event prone to  escalating into systemic disruption.
  1. Continuously monitor situational changes in high-risk regions and insurance market assessments to provide reference for relevant departments and support primary responsible unit in comprehensive risk assessments.
  2. For operations in high-risk waters, evaluate feasible options such as port omission and route adjustments.
  3. Formulate corresponding response measures based on multiple potential future scenarios to strengthen risk-tolerance and resilience.
Operational Risk:
Information Security Risks
From a group organizational structure perspective, information security risks carry structural impacts, mainly manifested in Common Cause Failure risks associated with core systems and shared platforms, as well as lateral propagation risks resulting from cross-entity shared systems and user accounts. Continuously promote various information security management systems and major cybersecurity incident drills to strengthen capabilities in identity authentication, email security, and access control.
Compliance Risk:
Economic Sanction/Export Control Violation Risks
  1. Non-compliance with economic sanction laws and regulations may result in increased operating costs.
  2. Potential claims for damages or other breach-of-contract liabilities asserted by counterparties.
  1. Compliance awareness and education.
  2. Collect relevant laws and regulatory information.
  3. Update suspicious container lists on an ad-hoc basis.
  4. Establish an internal screening system.
  5. Provide case-specific legal opinions, consult external experts or legal counsel for opinions and assistance, and review company regulations, procedures, and contract terms.
Compliance Risk:
Competition Law Violation Risks
  1. Non-compliance with competition laws and regulations may result in increased operating costs.
  2. Potential claims for damages or other breach-of-contract liabilities asserted by customers.
  1. Compliance awareness and education
  2. Collect relevant laws and regulatory information.
  3. Provide case-specific legal opinions, consult external experts or legal counsel for opinions and assistance, and review company regulations, procedures, and contract terms.
 

Emerging Risks

Risk Items Potential Impacts Mitigation Measures
AI Agent Risks
  1. Incorrect AI analysis or judgments may result in wrong investment decisions, improper resource allocation, or even hefty penalties and compensation costs arising from cybersecurity incidents or personal data breaches.
  2. IAI-generated outputs that deviate from facts or are disrupted by malicious attacks will disrupt the stability of company decision-making processes, leading to erroneous decisions or degraded service quality.
  3. With global regulatory frameworks on AI progressively tightening, companies that fail to establish appropriate control mechanisms may face non-compliance penalties and operational restrictions.
  4. Misguided AI decisions, data breaches, or improper usage scenarios may undermine market trust and cause long-term reputational damage to the brand.
  1. The Cybersecurity Department periodically disseminates guidelines to Group employees regarding precautions for online meetings and AI tool usage to strengthen employees’ information security awareness.
  2. Yang Ming has fomulated the“Yang Ming Marine Transport Group Artificial Intelligence (AI) Application Guidelines.”
Carbon Fee Risks As global climate change issues grow increasingly severe, the shipping industry—a major source of global carbon emissions—faces a rising number of decarbonization regulations and carbon pricing mechanisms, such as the EU Emissions Trading System (EU ETS), FuelEU Maritime, the IMO GHG Fuel Intensity (GFI) standard, and other emerging national and regional regulations. Carriers must closely monitor regional regulatory developments to ensure full compliance across jurisdictions. Establish a carbon management mechanism, continuously track policy developments, and conduct training programs to enhance organizational response capabilities.
 

Risk Management Training Status

To strengthen risk awareness among Group employees and integrate risk management concepts into daily business operations, Yang Ming periodically conducts risk management training programs. In 2026, Yang Ming invites all employees to participate in training themed“All-Risk Management,”covering the principles and practices of comprehensive risk management, as well as the fundamental concepts of crisis and response management. The training aims to enhance employees’understanding of preparedness measures before disasters occur and response measures during incidents.


Major Incident Emergency Handling Procedure

Yang Ming has formulated emergency handling procedures for various operations, detailing the reporting and handling procedures for relevant events to control subsequent improvements. Drills are carried out regularly as well.

Emergency Handling Procedures for Operations Procedure Description Implementation Drill/Promotion Frequency
Yang Ming Group's Working Reporting and Handling Major Incidents The procedures govern the items to be reported, parties to be notified, content, and handling of major incidents with the Group, or those upon reception of crisis notice prior to a potential major incident, for effective control and handling before or after a major incident. Irregular promotion
Major (Vessel) Accident Reporting & Response Procedure Accidents are classified into different levels according to definitions, with corresponding response teams assigned. After an accident occurs, relevant departments are notified, international conventions and local regulations, flag state regulations are complied with, and subsequent investigations are cooperated with and necessary assistance provided. Finally, corrective measures are developed to prevent recurrence. According to SOPEP oil pollution emergency plan and safety management plan requirements, regular drills are implemented, and ship-shore exercises are irregularly conducted according to regulatory requirements, simulating different scenario accidents for onboard and shore responses to disaster accidents.
Procedure or Work-related Accident and Emergency Response  Plans Each workplace should formulate emergency response plans so that when occupational disasters or accidents occur in the workplace, effective responses can be carried out according to the emergency response plan to minimize injuries and losses. Regular implementation
Procedure for Handling Serios Crew Injury / Illness Death) The procedure ensures that the Company’s ships can take timely and effective measures in the event of a major accident/injury/illness (death) to the personnel on board in order to minimize the injury to the personnel. Irregular drills
Emergency Procedure for Shipboard Hazardous Goods The procedure dictates the regulations for the elimination or mitigation of damages in the event of accidents/disasters arising from dangerous goods/ materials seafarers Yang Ming’s ships or during shipping. The onboard SMS (Safety Management System Activity Schedule) has established hazardous cargo loading and leakage handling to be implemented every 2 months.
Procedure for Emergency Preparedness & Response Plans for Office Buildings and Premises To prevent various disasters (natural disasters and fires, etc.) and emergency rescue, so that personnel life injury losses can be reduced, this procedure is formulated.
  • Fire drills: Conducted according to fire protection regulations (once every six months)
  • Qidu Building: Typhoon and flood prevention drills (once a year)
Information Security Incident Management Procedure To ensure that the Company's information and information communication assets can quickly and effectively handle information security incident reporting, take necessary response measures, reduce damage that incidents may bring, and prevent related matters when information security incidents occur. Annual regular disaster recovery drill once a year
Epidemic Prevention and Response Procedures The procedures are to enhance the monitoring and risk assessment of epidemics in locations where Yang Ming operates and to improve the preparedness and response mechanisms so as to reduce the risk of personnel infection and ensure the normal operations of the Company.
  • Irregular promotion
  • When competent authorities announce that the company or branch office location is an epidemic area and may affect normal company operations, it should be reported according to the " Yang Ming Group’s Working Procedure for Reporting and Handling Major Incidents" and establish an epidemic prevention response team and designate a convener according to severity, planning various epidemic prevention response plans.
Procedures for Reporting High risk Communicable Diseases by Agents To regulate the process for agencies to report to headquarters when high-risk infectious diseases occur, including office operations and employee conditions, so that headquarters and agencies can effectively respond and handle during infectious disease periods, reducing the Company's operational risks. Irregular promotion
Procedures for Handling (Container Yard) Accidents The procedures govern the handling of accidents taking place in the Container Yard of Yang Ming, covering the appraisal of damages to personnel, containers, cargo, machinery or facilities, the attribution of liabilities, notarization, indemnity claims, insurance claims, etc. Hold 1 hazardous goods training session and 2 emergency response training exercises annually, with time adjustments or increases as necessary.
  
We are committed to protecting your personal data and providing you with access to your personal data in accordance with the personal data protection laws in force in the European Union.
By clicking "Accept All", you are giving us permission to place cookies to enhance your experience on this website, to help us analyze site performance and usage, and to allow us to deliver relevant marketing content. You can manage your cookie settings below. By clicking "Confirm" you agree to the current settings.

Privacy preferences

We are committed to protecting your personal data and providing you with access to your personal data in accordance with the personal data protection laws in force in the European Union.
By clicking "Accept All", you are giving us permission to place cookies to enhance your experience on this website, to help us analyze site performance and usage, and to allow us to deliver relevant marketing content. You can manage your cookie settings below. By clicking "Confirm" you agree to the current settings.

Manage preferences

Necessary cookie

Always on
網站運行離不開這些 Cookie 且您不能在系統中將其關閉。通常僅根據您所做出的操作(即服務請求)來設置這些 Cookie,如設置隱私偏好、登錄或填充表格。您可以將您的瀏覽器設置為阻止或向您提示這些 Cookie,但可能會導致某些網站功能無法工作。