Governance
Board of Directors
Ethics, Policies, and Practices
Kirby is committed to the highest ethical standards across the company and its supply chain.
Business Ethics Guidelines
Kirby is committed to doing business
the right way or “The Kirby Way”
All Kirby directors, executives, and
employees are required to sign and
uphold the Business Ethics Guidelines
Guideline topics include: Equal
Opportunity, Discrimination and Sexual Harassment, Respecting Human Rights, Anti-Corruption, Financial Accountability, Political Activities, Social Media, etc.
Kirby does not tolerate any retaliation against employees for reporting a violation of law, rule, regulation, or the Guidelines
More than 5,000 training courses
completed on Business Ethics and
Foreign Corrupt Practices Act in 2022
Vendor Code of Condut
Kirby implemented stronger guidelines for our suppliers, which were designed to help ensure responsible product sourcing and the safety and well-being of workers across the global supply chain
– Treatment of workers
– Workplace safety
– Impact on the environment
– Ethical business practices
Respecting Human Rights
Kirby is committed to ensuring a work environment that is free from:
‒ Human Trafficking
‒ Forced Labor
‒ Harmful Child Labor
‒ Discrimination and Harassment
Employees are expected to consistently demonstrate respect and uphold the dignity of others
Employees are to encourage partners, suppliers, and other third parties to adopt similar standards with respect to human rights
Kirby’s position on Human Rights is outlined in its Business Ethics Guidelines, Vendor Code of Conduct, and Human Trafficking Policy. In addition to other training Kirby provides to its employees, Kirby has recently implemented targeted human rights training for its employees. The company targets to have all employees trained by 2024. Violations or concerns may be communicated via the Company Hotline and may result in termination of employment or the relationship with the supplier.
97% completion of human rights training*
*Training is being implemented by business unit
Target: 100% company-wide training complete by 2024
Cybersecurity and Data Privacy
Governance
- Steering Committee: Meets at a minimum quarterly to discuss overall approach, manage priorities, and ensure progress
- Audit Committee: Receives a Cybersecurity update quarterly
Proactive Defense
Multifactor Authentication
Monthly vulnerability management program for critical and high-security patching
Anti-phishing solution for emails
The company has not experienced an information security breach in the last four years
Sophisticated backup and recovery solutions
Geofencing
A robust and practiced incident response plan
Employee Education and Training
- All employees are required to complete annual cybersecurity training
- Director hosts targeted training with high-risk users and executive
- Employees who fail a phishing test are required to take remedial training
Education: Cybersecurity Director speaks at operations meetings to raise awareness and educate on current topics
