CRU’s governance and compliance framework underpins how we operate across the company. Built around adaptability, collaboration and proactivity, it shapes how we work with colleagues, customers and stakeholders.
Our Compliance and Legal Services Department leads the global framework under the guidance of the Board.
Our Key Responsibilities
|
|
|
|
|
|
|
|
|
Information Security
CRU is committed to protecting the confidentiality, integrity and availability of the information it holds, ensuring it remains accessible and recoverable by authorised users when required. We operate a risk-based information security program, and have been ISO 27001:2022 certified since 2024. Our controls, processes and ongoing monitoring activities are designed to safeguard information from unauthorised access, disclosure, alteration and disruption.
Data Privacy
We respect the privacy rights of individuals and are committed to processing personal data responsibly, lawfully and transparently, in accordance with applicable data protection regulations. Our privacy practices are designed to protect personal information throughout its lifecycle while supporting the rights and expectations of customers, employees and other stakeholders globally.
Environmental Commitment
CRU is committed to reducing our environmental impact where practical. We continue to assess our carbon footprint and aim to make carbon reduction an integral part of our business strategy.
Complaints
For information on how we handle complaints, please see our Global Complaints Handling Policy.
Questions or Concerns
Have a question about our governance and compliance?
Please contact our Compliance and Legal Services Department here.
