We seek to operate our business responsibly, ethically, and in alignment with the interests of our stakeholders.
Oil & Gas
Energy transition and renewables
Innovation and technology
Climate change
Risk Management
ESG advocacy
Reglatory trends
Diversity, equity and inclusion
Human Capital
Compensation
Supply chain and market development
Finance and capital markets
Audit
Independent Board Member
CPC1
AC2
CC3
Susan Segal
Mauricio Doehner Cobian
Pierre-Jean Sivignon
Gérard Martellozo
German Losada
CPC1:
Corporate practices committee
AC2:
Audit committee
CC3:
Compensation committee
Vista’s Board of Directors oversees the execution of our sustainability strategy, as well as our risk management policies and procedures, including those related to climate action.
The Corporate Practices Committee specifically reviews the execution of our ESG plan on a quarterly basis, focusing on progress vis-à-vis annual targets, overall project execution and risk analysis. The Committee provides guidance and feedback to the Executive Team, and reports progress to the Board. This flow strengthens our decision-making process and ensures we remain focused on achieving our ESG goals.
At a corporate level, we have a cross-functional working group, composed of members of our Leadership Team, in charge of executing Vista’s ESG projects. Our ESG framework creates an effective portfolio with projects that have short- and long-term objectives and an accountability system to monitor our progress. We believe this framework enhances our capacity to design, execute and report progress on ESG projects and initiatives, and also assess and manage risks following TCFD governance recommendations.
Ethics and transparency are fundamental pillars of our business development.
We constantly work with our teams to maintain an ethical culture across the whole company, ensuring our employees conduct their daily activities in accordance with Vista’s values. Vista’s ethical and cultural framework is defined by the guidelines included in our Code of Ethics and Conduct and its supplemental policies and procedures.
We are aligned with governance, business ethics, anti-corruption and anti-bribery best practices, showing our commitment to honest and ethical conduct beyond compliance.
Our ethics and compliance program is comprised by six corporate integrity elements, which are available for all our employees, contractors and stakeholders in general.
Code of Ethics and Conduct
Policies and procedures associated to the Code of Ethics and Conduct
All policies are available to our employees at our digital OMS portal.
Board of Directors
Ethics Committee
Ethics Line
Web platform
Periodic training to management and employees
We are aware of the impact and importance human rights play in all business sectors, including the energy industry, and have incorporated the risk of a breach in human rights principles into our Corporate Risk Matrix. Social risk management, a key element of our Social Management System, incorporates proactive risk assessment and management of social engagement, including human rights assessment.
Human Rights policy is available to our employees and all our stakeholders on our website.
Senthuman rights policyhuman rights policyHuman Rights watch clause included in the Terms and Conditions in all our contracts with service providers.
Sentintegrity policy for contractors & suppliersintegrity policy for contractors & suppliersInternal domestic violence protocol, including financial aid and legal advice to employees.
Direct dialogue channels with our communities publicly available on our website.
SentCommunity feedbackCommunity feedbackCommunity engagement framework, covering local community engagement and social risk and impact management.
Through our Enterprise Risk Management (“ERM”) process we identify and assess a broad spectrum of current and potential sources of risk, that may compromise our ability to operate safely and responsibly.
Our Corporate Risk Matrix (“CRM”) helps us monitor risk sources, which include global macroeconomics, domestic economy, policy and regulation, labor and social issues, competitive dynamics, availability and quality of infrastructure and services, breaches in compliance, integrity of internal processes, and climate change. The CRM also maps our mitigation plans for each of the risks under analysis.
The CRM is monitored by the Executive Team on an ongoing basis, and reported every quarter to the Corporate Practices Committee, which is responsible for reviewing and reporting to the Board. We constantly review the scope of our CRM.
We recognize that climate change poses long-term risks to our industry and business. To address this, we aim to strengthen the resiliency of our business model and our corporate climate risk governance to effectively manage climate-related risks.
Our ERM framework ensures consistent risk management practices, including climate risks, which are tracked in our CRM with assigned ownership, controls, and mitigation plans.
The CRM includes both transition and physical climate risks classified in the following categories: Regulatory and legal, Market, Physical, Financial, Reputational, and Technological. These risks may impact our operations and financial performance. The expandable section below outlines their potential scope, impact, and our mitigation efforts.
Risks factors
Regulatory and legal risksScope
Mitigation and action plan
Risks factors
Market risksScope
Mitigation and action plan
Risks factors
Physical risksScope
Mitigation and action plan
Risks factors
Reputational risksScope
Mitigation and action plan
Risks factors
Technology risksScope
Mitigation and action plan
Our cybersecurity strategy aims to safeguard our technological assets and data, while enhancing the resilience of our entire value chain. This ensures the integrity and reliability of our operations.
Our practices aligned with the latest cybersecurity regulations set by the U.S. Securities and Exchange Commission in 2023, which seek to enhance and normalize reporting regarding cybersecurity risk management, strategy, governance, and incident disclosure.
The cybersecurity team reports periodically to the Executive Team through an internal Cybersecurity Committee, chaired by our CTO, which meets at least quarterly and reports to the Corporate Practices Committee, also on a quarterly basis. Our cybersecurity practices are aligned with standards such as the NIST Cybersecurity Framework 2.0, ISA/ IEC 62443, and the new SEC regulations.
1 Based on NIST (National Institute of Standards and Technology) CSF (Cybersecurity Framework) where maturity is assessed from 0 (lowest) to 5 (highest) across 108 categories. Our 2023 maturity level reported was validated by KPMG as of December 2023.
Contact us to learn more or share your questions about our work with local communities.
