Using the analysis of impacts, risks and opportunities, and acknowledging the importance of economic, environmental, social and governance management, in 2016, the Company established its first Responsible Business Plan for a three-year period (2016-2018). In 2019, at the end of its term, the Company’s second Responsible Business Plan was started (2019-2021).

This plan includes the Company’s specific sustainability objectives and is aligned with the 2030 Agenda, the Principles of the Global Compact, Plan Reconecta, the Responsible Business Plan for Hispanic America, and the Colombian context, establishing the results of stakeholder engagement expressed in materiality. Consequently, it has been structured under six lines of commitment:

The Integrated Management System is audited annually as an essential activity to ensure achievement of the goals to manage, assess and ensure compliance with the procedures, policies and controls, as well as their efficacy. Similarly, an external audit was conducted on each management system by the certifying body, which in 2020, was AENOR, with the aim to confirm that the Company meets all of the standard’s requisites, using the ISO standards as a reference.

Additionally, as well as the internal and external audits of the IMS, during the year, there were also audits by customers, audits to

verify environmental, energy and infrastructure information, and monitoring by government entities, as well as other processes.

In 2020, 53 audits were conducted by the Company and third parties for the validation of the Integrated Management System. Four external audits were also carried out for each management system, which obtained satisfactory results, confirming that Movistar’s management system remains certified by international standards, proving an adequate degree of maturity.

The market requirements mean that all kinds of organizations and companies have to consider a broader vision that meets the needs not only of the customers, but also of other internal stakeholders (shareholders and employees) and external stakeholders (government, environment, suppliers and society) to achieve its strategic goals. The Integrated Management System (comprised of the Quality, Environmental, Occupational Health and Safety, and Information Security Management Systems) is a tool to support the sustained fulfillment of the stakeholders’ needs and expectations.