Suits the C-Suite

25 April 2022

Czarina R. Miranda

Managing the hybrid workforce (First Part)

First of two partsFor many organizations trying to regain their footing post-pandemic, it can be quite a paradigm shift to make decisions on adopting hybrid work models, especially since health alert levels continue to be lowered as a means of stimulating economic activity. Hence, under the new normal, corporate leaders will have to address new challenges and questions in managing hybrid teams.There can be great reluctance on the part of organizations to come to terms with the need for a flexible workforce post-pandemic. While opinions vary on the actual productivity that remote work has delivered in the past two years vis a vis pre-pandemic operations, flexible work arrangements offered an avenue for many organizations to remain operational despite the lockdown. There is also anecdotal evidence in support of how various organizations remained productive with telecommuting. However, each organization will need to gauge productivity for themselves given the scale and nature of their operations.A look into worker sentiment points to a general preference for an arrangement that involves flexibility in when and where employees perform their duties. The recent EY Future Consumer Index shows employees “losing interest in pre-pandemic work patterns,” a finding that reinforces those made in the EY 2021 Work Reimagined Employee Survey that showed the majority of surveyed employees in Southeast Asia preferred not to return to pre-COVID ways of working.In the case of the business process outsourcing industry, which employs an estimated 1.4 million workers, there has been overwhelming preference on the part of the talent for a balanced, hybrid work arrangement. This has prompted industry leaders to propose that the government reconsider its order for the outsourcing companies to prepare for a return to full office operations lest they lose their tax perks that are contingent on full on-site operations.Over the past two years, hybrid teams have attracted an abundance of attention. Employees generally favor the opportunity to distance themselves from the workplace — both geographically and emotionally. Filipinos working in the National Capital Region and key cities notorious for traffic congestion found great relief from the hassles of the daily commute. In the human resources domain, the conversations these days among experts often gravitate to the paths that organizations plan to take post-pandemic.The idea of hybrid work models being in the forefront of conversations in human resources did not happen by chance though, even with the lockdowns providing the impetus for organizations to stay agile and quickly find ways to keep operations going amid the restrictions on mobility especially in the first few months of the community quarantine. If you look at legislation related to hybrid work models, telecommuting was a concept already found in our legislative bills before health authorities detected the first COVID-19 case in the Philippines.REMOTE WORK POLICYRepublic Act 11165 or the Telecommuting Act was signed in Dec. 2018 or more than a year before the pandemic. The law formalizes the option for employees to work from home and declares telecommuting as an alternative work arrangement that both employers and employees may implement upon mutual consent. The law also sets out the rights and duties of both employers and employees and promotes employee welfare.Telecommuting and other alternative work models have since become an important subject for legislation and policymaking.A look into our evolving policy regime on flexible work models brings to mind the Department of Labor and Employment’s Labor Advisory No. 09 Series of 2020 which seeks to assist and guide employers and employees in the implementation of “various flexible work arrangements as alternative coping mechanism and remedial measures” during the pandemic. This may not, however, bolster the narrative for hybrid teams because its use of the term “flexible work arrangements” can actually worry employees; “arrangements” referred to in the policy are reduced work hours or workdays, rotation of workers, and forced leave — so-called “better alternatives than outright termination of the services of the employees or the total closure of the establishments.”Responsibilities of employers to their employees are likely to evolve as well if hybrid work models were indeed to become the norm.The experience with telecommuting during the pandemic has, in fact, called the attention of lawmakers to the issue of rest hours as employers’ control over employees now extends beyond work hours through the use of phone, email, and messaging apps. With technology and the ease of communication that it brings, it is easy for lines to blur between work and home. Employees can easily fall into the trap of voluntarily keeping lines of communication open and their devices switched on beyond work hours even if not required by their superiors.Senate Bill 2475 or the Workers Rest Law proposes penalties on employers who intrude on workers’ rest hours to prevent work from depriving employees of their personal time.COMPRESSED WORKWEEKThe government’s economic managers have also considered a proposal for a four-day workweek to help businesses cut costs. There are still no clear signs on whether this proposal will lead to a new law or a department order since the government is likely to present this as management prerogative rather than a mandate for companies to follow.Two years of telecommuting has also given rise to a host of concerns on the part of employees who are responsible for staying available for tasks and meetings during work hours. While remote work saves them the costs and hassles of the daily commute, in return they carry the burden of logistics, internet and utility expenses. Senate Bill 1706 seeks to ease this burden by providing a tax break equivalent to a P25 reduction from the taxable income for every hour worked from home.There have been companies that have opted to extend financial assistance to specific teams within the organization, whose continued productivity weigh more than the cost of any internet connectivity subsidy.OFFICE SPACEOther practical considerations that many companies choosing the hybrid team path will have to tackle include the use of leased office space. Some have had to contend with being unable to negotiate significant discounts on office lease contracts despite the extended lockdowns in the Philippines that kept most workstations unoccupied. A decision to pursue a hybrid work model post-pandemic will mean reconsidering an organization’s pre-pandemic need for space.As organizations explore options to adjust their use of space and optimizing every square meter, some have looked into the hoteling concept (telecommuters reserve a workstation or desk for their in-office days) or hot desking (an employee finds and works at any open seat when in the office). Hoteling is seen as a way of cutting an organization’s office space requirements and costs while also ensuring that social distancing can be managed should employees physically enter the workplace. This can offset investments in equipment and technology that may be needed to support a hybrid team and keep members collaborating as well as responsive to client needs.There can be many more challenges to learn along the way as most organizations take this route, and leaders’ responses can vary from one company to another. As organizations devise their own mix of work arrangements that are suitable to their business models, this direction cannot be seen as a partial return to the old “normal.” Instead, this charts a new path forward that acknowledges the changes in workforce needs and the opportunity for leadership to reimagine the future of work.In the second part of this article, we will talk about the challenges of keeping employee well-being at the forefront in the hybrid work environment. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinion expressed above are those of the author and do not necessarily represent the views of SGV & Co.Czarina R. Miranda is the People Advisory Services Leader of SGV & Co.

18 April 2022

Aris C. Malantic

Why analytics are essential to quality non-financial corporate reporting

EY’s recent Global Corporate Reporting Survey tells us that change in corporate reporting is accelerating. In particular, the need to better communicate an organization’s ESG performance is putting significant pressure on the finance leaders responsible for its preparation — requiring finance teams to beef up their analytics capabilities.Late last year, more than 1,000 CFOs, financial controllers and senior finance leaders of large organizations across 26 countries — including 250 in Asia-Pacific — were surveyed to understand the challenges they face in corporate reporting.The biggest theme emerging from this research is that, alongside the traditional financial reporting that finance leaders oversee, investors and other stakeholders want consistent and credible ESG disclosures on material issues to help them understand how a company creates long-term value and sustainable growth.EY survey participants are not alone in noticing this trend. At EY, we’re seeing growing increased pressure on corporates to improve their ESG reporting — from equity investors, insurers, lenders, bondholders and asset managers, as well as customers who all want more details on ESG factors to assess the full impact of their economic decisions.ADVANCED ANALYTICS KEY TO EXTRACTING ESG METRICS AND INSIGHTS Extracting ESG insights from data is complex and time-consuming — an almost impossible manual task. It requires the use of advanced analytics, which are now available to help companies structure, synthesize, interpret and derive insights from voluminous data, and create credible and useful ESG reporting. Advanced analytics is particularly important in ESG reporting because of the need to address and relate significant amounts of unstructured data.Not surprisingly, the EY Global Corporate Reporting Survey found the top technology investment priority for finance leaders over the next three years is in advanced and predictive analytics. This priority is particularly felt in Asia-Pacific where 47% of regional respondents (68% in China) vs. 38% of global respondents have analytics as their top tech investment priority.DATA VOLUME AND QUALITY ARE STILL STUMBLING BLOCKSYet even as finance teams seek to invest in analytics and build a more agile financial planning and analysis approach, several data challenges stand in the way. According to EY Asia-Pacific survey participants, the biggest hurdles include the sheer volume of external data, followed closely by data quality and comparability issues. Lack of timely data and inefficient data integration are also problematic.Analytics starts with data, but techniques such as predictive modeling, statistics and visualization are also important in turning that data into timely and actionable insights.For example, organizations can enhance the quality of reporting by introducing forward-looking insights, using external data to corroborate and provide analysis on future trends. Thereafter, this downstream reporting outcome can be used to streamline upstream activities, such as capturing data in the right format to allow for efficient collection and analysis.However, this requires proper planning from data collection to reporting, with technology as a key enabler. In other words, this process should be considered as part of an organization’s digital transformation journey.COLLABORATION ESSENTIAL TO BUILD NEW ANALYTICS CAPABILITIESDeploying these sorts of advanced solutions requires more than finance teams buying new technology. It will take a cross-disciplinary effort that combines advanced data science skills, business domain expertise, and finance and ESG experience.Developing an approach that mimics human efforts is a guided process. It’s not simply about developing algorithms — it can require learning and incorporating the human decision-making process. The finance team will need to work together with key stakeholders, such as the analytics centers of excellence, to define the use cases for advanced ESG analytics and then collaborate during the development process.RESOURCES AND SUPPORT REQUIRED TO DRIVE REPORTING EXCELLENCEBetter quality non-financial corporate reporting, underpinned by advanced data analytics, will be essential to meet the changing needs of investors and stakeholders. Finance leaders need to drive innovation by setting out a bold technology road map for transforming financial analytics and providing enhanced and trusted reporting, including advanced tools such as AI (artificial intelligence).To support them, boards should assess whether finance leaders have adequate resources and budgets to address these challenges and increase their use of advanced data analytics to deliver more robust non-financial corporate reporting. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinion expressed above are those of the author and do not necessarily represent the views of SGV & Co.Aris C. Malantic is a Market Group Leader and the Financial Accounting Advisory Services (FAAS) Leader of SGV & Co., as well as the EY Asean FAAS Leader.

11 April 2022

Arthur M. Maddalora

Accounting considerations for the oil and gas sector as renewable energy adoption drives ESG reporting

Globally, more and more countries continue to increase their focus on developing renewable energy sources, both due to the increasing pressure from various stakeholders, as well as the acknowledgement of the clear and present danger posed by climate change. Because of this, environmental, social, and governance (ESG) reporting has become a top priority for most boards.As the country gains momentum in shifting to renewable energy, we expect that financial reporting will have to reflect the commitments and actions of most organizations, notably those in the oil and gas sector, in tackling climate change. As a signatory to the Paris Agreement, the Philippines, being a country that is particularly vulnerable to climate-related risks, has pledged to reduce its own greenhouse gas emissions by 75% from its 2015 levels by the year 2030.Given the increasing global climate concerns and strong interest in achieving the United Nations Sustainable Development Goal 7 of ensuring access to affordable, reliable, sustainable and modern energy for all, the Department of Energy (DoE) is pursuing a Clean Energy Scenario setting a target of 35% renewable energy share in the power generation mix by 2030 and more than 50% by 2040. As of 2020, renewable energy accounted for 21.2% of the Philippine power generation mix.OIL AND GAS REMAIN VITAL TO ENERGY SECURITYThe DoE reported that in 2020, indigenous sources comprised almost 53% of the energy supply mix, out of which 6.6% was accounted for by the oil and gas sector, mainly from three petroleum service contracts (SCs): SC38 Malampaya, SC14C1 Galoc, and SC49 Alegria. Malampaya and Galoc are projected to be depleted by 2024 and 2025, respectively.However, in October 2020, the President lifted the moratorium on oil and gas exploration in disputed areas in the West Philippine Sea. One of the areas that will significantly benefit from renewed exploration is SC72 Recto Bank, which is operated by a subsidiary of PXP Energy Corp. SC72’s Sampaguita Gas Field is reported to contain prospective resources of 3.1 trillion cubic feet of gas. This project, once developed and made operational, can fill the void that will be left by Malampaya and Galoc.The reality is that until more renewable energy sources are developed, oil and gas will remain a significant component of the Philippine energy mix. This is why, given the global emphasis on climate-related reporting, oil and gas industry players should be seen as being proactive and taking the lead in addressing ESG concerns.FINANCIAL REPORTING FOR CLIMATE CHANGESustainability reporting is an important factor in improving a company’s sustainability commitment and its relationship with investors and customers.With this, the Securities and Exchange Commission, through its Memorandum Circular No. 4-2019, has provided guidance regarding disclosure requirements relating to sustainability reporting as an attachment to Publicly-Listed Companies’ annual reports (SEC Form 17-A).As climate-related matters continue to evolve and entities make further commitments and take additional actions to tackle climate change, it is important that they ensure their financial statements reflect the most updated assessment of climate-related risks. In November 2021, the International Financial Reporting Standards (IFRS) Foundation announced the establishment of the International Sustainability Standards Boards (ISSB), which is tasked to develop global standards linked to sustainability disclosures including climate and other environmental matters. As of 31 March 2022, the ISSB has issued two Exposure Drafts on IFRS Sustainability Disclosure Standards for public comment.While the Philippine Financial Reporting Standards (PFRSs) do not as yet explicitly reference climate change, climate risk and other climate-related matters, there may still be anticipated impacts on oil and gas companies over several areas of accounting as follows.General disclosure requirements. Entities are required, at a minimum, to follow the specific disclosure requirements in each PFRS standard. In determining the extent of disclosure, entities are required to carefully evaluate whether users of financial statements can assess the effects of climate change on their financial statements. If climate-related matters could reasonably expect to influence the decisions of the users of the financial statements, this information must be disclosed.Going concern. In many cases, climate risk may not add significant going concern uncertainty in the short term. However, Philippine Accounting Standards (PAS) 1 requires disclosures of material uncertainties. Climate-related matters could create material uncertainties related to events or conditions that cast significant doubt upon an entity’s ability to continue as a going concern. In such a case, although going concern may be assumed, additional disclosures explaining the uncertainties associated with the assumption would be required.Exploration and evaluation assets. Entities should consider the impact of climate risk and potential future developments, including the sustainability of its current business model and commercial viability, in assessing the recoverability of its exploration and evaluation assets (i.e., deferred exploration costs) and provide appropriate disclosures.Property, plant and equipment (PP&E). Climate-related matters have the potential to significantly impact the useful life, residual value and decommissioning, and restoration of PP&E (e.g., wells, platforms and related assets, refineries, retail service stations, etc.). Climate change and the associated legislation to promote sustainability increase the risk that PP&E items become “stranded assets” whose carrying value can no longer be recovered within the entity’s existing business model. Given the uncertainties around the impact of climate change, disclosures should be enhanced to allow the users of financial statements to understand and evaluate the judgements applied by management in recognizing and measuring items of PP&E.Impairment of assets. The extent to which certain assets, processes or activities will be impacted by climate-related business requirements and how climate-related risks and opportunities will affect an entity’s forward-looking information, such as cash flow projections, may require significant judgement. Entities should consider what information users rely on in assessing the entity’s (lack of) exposure to climate-related risks.Provisions. As entities take actions and initiatives to address the consequences of climate change, these actions may result in the recognition of new liabilities or, where the criteria for recognition are not met, new contingent liabilities have to be disclosed. Entities should ensure that sufficient disclosures are provided to allow users of financial statements to understand those uncertainties, how climate transition has been considered in the measurement of a provision or disclosure of a contingent liability, and the assumptions and judgements made by management in recognizing and measuring provisions.In a world that is increasingly sitting up and taking note of ESG concerns, the pressure on the oil and gas sector to help address climate risks will likewise continue to mount. While the above list of climate-related considerations is by no means all-inclusive and may vary between entities, they offer a starting point for the industry to take a proactive and progressive stance and demonstrate how it is doing its part to make the global climate change ambition a reality. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinion expressed above are those of the author and do not necessarily represent the views of SGV & Co.Arthur M. Maddalora is a senior manager from the Assurance Service Line of SGV & Co.

04 April 2022

Benjamin N. Villacorte and Erika N. Courteille

What the EPR Act of 2022 can mean for businesses

Significant changes are bound to happen to the way manufacturers of products with plastic packaging do business once legislators give final approval to the bills institutionalizing the country’s policy and practice of Extended Producer Responsibility (EPR). Mandates for cutting plastic waste footprint will be clear and measurable. Producers will have to deal with compliance reports, internal systems to record waste reduction, third-party audits, and hefty fines for violations.Plastic generation has continued to rise to approximately 400 million tons per year worldwide, according to the 5th United Nations Environment Assembly, and is estimated to double by 2040. Filipinos use up about 2.15 million tons of plastics annually, and more than one-third of these reach the environment, said the World Wide Fund for Nature.In response, the government has started responding to global efforts and targets. In 2019, the National Economic and Development Authority (NEDA) published the Philippine Action Plan for Sustainable Consumption and Production. House Bill (HB) 9147, also known as the “Single-use Plastic Products Regulation Act,” seeks to promote plastic circularity through reduce, reuse, and recycle practices, as well as the EPR.Senate Bill (SB) 2425 and HB 10696 focus on institutionalizing EPR schemes to tackle the plastic waste problem. Both seek to prevent plastic waste from leaking into the environment by holding those that generate waste responsible for the whole life cycle of their products. The bills, which are currently pending joint resolution, push for the amendment of the Ecological Solid Waste Management Act of 2000 (RA 9003).UNDERSTANDING EPREPR is the environmental policy and practice that gives obliged companies (or producers) responsibility over the entire life cycle of their products. With the EPR, producers should ensure proper and effective recovery, treatment, recycling, and disposal of residual plastics from their products, and should adopt ways to improve plastic recyclability or reusability.EPR schemes are designed for participation by relevant stakeholders — the producers themselves, government, producer responsibility organizations (PRO), waste management operators, and other relevant parties such as the informal sector and third-party auditors.The latest iterations of the bills have two major differences that must be reconciled. SB 2425 obliges large companies only while HB 10696 encompasses medium and large companies. SB 2425 requires companies to target 10% recovery in the first year of implementation and 80% by the eighth year. Meanwhile, HB 10696 starts with 20% in the first year, and targets 80% by the fifth year.To encourage compliance, rewards and recognition will be given to outstanding and innovative initiatives. Tax and duty exemptions on imported capital equipment and vehicles used for the EPR scheme may also be awarded to qualified organizations. On the other hand, organizations who submit false documents, misrepresent themselves or fail to meet targets are liable for hefty fines ranging from one to twenty million pesos depending on the size of the organization. Business permits will also be automatically withdrawn for third offenses. BUSINESSES MUST CONSIDER ZERO-WASTE STRATEGIESThese bills, if passed into law, will surely affect how obliged companies conduct business. Within nine months upon the effectivity of the law, producers or their authorized PRO, shall register their EPR programs with the National Solid Waste Management Council and align their strategies and programs with the mandated recovery targets. Moreover, they will have to submit annual reports to monitor compliance with their respective EPR schemes and targets. Businesses must establish an internal system to record and report their plastic waste footprint, which must be audited by an independent third-party. Recovery or offsetting reports by waste management operators or diverters must also be audited.Waste management operators must ensure that national targets are met. They must coordinate closely with PROs and obliged companies, possibly set up more materials recovery facilities (MRFs) and prepare the necessary resources. Based on the experience of other countries, integration of the informal sector is crucial to the success of EPR schemes since the current bulk of plastic collection, sorting and recycling relies on them. This raises the possibility of developing a plastic management ecosystem where the informal sector provides their knowledge and expertise to the process, and in return, operators can develop formal programs aimed at providing informal workers with secure livelihoods and social protection.EPR also requires buy-in from the consumers. PROs must conduct extensive awareness campaigns on the importance of segregation and sustainability. It is worth noting though that worldwide, it is consumers themselves who are showing preference for brands that are true to their sustainability claims.The EY Future Consumer Index shows that younger generations are critical, skeptical, and willing to switch brand loyalty if expectations are not met. Twenty-four percent of Gen Z and Millennials check the sustainability claims brands make, compared to 4% of Boomers, and they take action, too. Twenty-one percent of Gen Z and Millennials have stopped buying a product because the brand isn’t doing enough for the environment.The point is that while it may be difficult to strike a balance between sustainability and preserving product quality with attractive packaging that ends up in the environment and landfills, consumer attitudes point to a reputational risk for brands that insist on the status quo. It won’t be a surprise if future consumers switch to alternatives and dump brands that are reluctant to change their packaging to more sustainable forms.While waiting for the final passing of the bills, businesses should start monitoring their plastic waste flow and build partnerships for the smoother implementation of their EPR program. They can also start redesigning their products or packaging to reduce their plastic footprint. Ultimately, EPR presents an opportunity for businesses to improve their products, show commitment to the achievement of global climate change targets, and transition towards a circular economy. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the authors and do not necessarily represent the views of SGV & Co.Benjamin N. Villacorte is a partner and Erika N. Courteille is a manager from the Climate Change and Sustainability Services team of SGV & Co.

28 March 2022

Cecille S. Visto

Corporate dissolution made easy

The Philippines, it’s often easier to incorporate a new entity than to dissolve an existing corporation. Investors face the tedious and long process of closing their businesses, which requires the cancellation of various registrations with regulators, including the Securities and Exchange Commission (SEC) and the Bureau of Internal Revenue (BIR). The difficulties of dissolution — and eventual liquidation — are one of the factors that affected the country’s ranking in the World Bank’s ease of doing business report in recent years. To address the challenges of corporations contemplating dissolving and eventually, liquidating, the SEC recently issued the guidelines on corporate dissolution consistent with the provisions of Republic Act 11232 or the Revised Corporation Code (RCC).DIFFERENT TYPES OF CORPORATE DISSOLUTION SEC Memorandum Circular No. 5, Series of 2022 prescribes the procedures and requirements for the different types of corporate dissolution, namely voluntary dissolution with or without creditors affected under Secs. 134 and 135 of the RCC, respectively; involuntary dissolution pursuant to Sec. 138; and dissolution by shortening of corporate term provided in Sec. 136. Of the three types, dissolution by corporate life shortening is by far the most common, with a corporation determining at the outset the end of its existence. This is done through the filing of an application for amendment of the Articles of Incorporation (AoI) with the SEC indicating the shortened term or the last day that it operates as a juridical entity. An entity can propose an expiration date of less than one year from the SEC approval or one year or more from such approval. The chosen timing also has a significant impact on the corporation. If the dissolution period is less than a year, the applicant has to submit, among others, a tax clearance certificate from the BIR. On the other hand, if the shortened term is a date that is more than one year from the Commission’s green light, the BIR tax clearance will not be required. While the procedure and process are essentially the same for both options — with the same applications lodged with the same government agencies — the difference is in the sequencing. Under the first option, the company will file and process the application for BIR tax clearance and undergo a rigorous tax audit process prior to filing an application for AoI amendment. The second option allows for the filing and processing by the SEC of the application for shortening of the corporate term without waiting for the BIR tax clearance. After the SEC approves the application, the company continues to operate as a juridical entity until the expiration of the corporate term. The corporation is not yet dissolved until after the last day of its shortened term. Until the release of SEC MC 5, these options were not officially provided in any SEC rulebook, although they were applied in practice. Numerous registered companies have taken advantage of the alternate route, effectively steering clear of the need to first secure the BIR tax clearance prior to the processing of the dissolution application. However, getting the clearance is still required for a corporation to officially close its business operations in the Philippines. In this regard, the BIR will still conduct the mandatory closure audit, which is a condition precedent to the grant of the tax clearance. Under the old rules, the SEC may approve the dissolution provided the end of the corporate term must be at least one year from the filing of the application. In the recently promulgated issuance, it is clear that the end of the corporate existence must be at least one year from the actual approval of the SEC. SEC MC 5 specifically provides that the application must contemplate a future date, and not a date that had already lapsed at the time of the filing of the application.TIMELINE AND COSTS A regular BIR tax audit covering a fiscal or taxable year may take at least one year to close, or longer depending on the complexity of the issues raised by the examiners. In a mandatory closure investigation that will cover the last two to three taxable years, the audit may be completed in approximately two years. Given that the completion of the BIR tax audit may be difficult to estimate, the timeline for the dissolution under option 1 is indefinite and will largely depend on the pace and workload of the assigned BIR examiners. Meanwhile, the timeline under option 2 is definite as to when the corporation is deemed legally dissolved. Upon the expiration of the shortened term, as stated in the approved amended AoI, the corporation is considered dissolved for SEC purposes without any further proceedings. Thus, dissolution automatically takes effect on the day following the last day of the corporate term, without the need for the SEC to issue a certificate of dissolution. The costs for both options are relatively the same, including the filing fees, regulatory fees, and deficiency taxes that may be assessed and paid at the close of the BIR tax audit. However, the simplified dissolution process will result in lower overall costs and time as there is no need to comply with certain requirements, such as filing of audited financial statements, which will save the corporation on professional fees. There will also be fewer personnel expected to be retained on the payroll, particularly those who will be in charge of the BIR tax audit and the related liquidation process. Likewise, the corporation is not required to maintain the office lease. Under Sec. 139 of the RCC, a dissolved corporation will continue to exist for three years after the effective date of dissolution to generally wind up its affairs, including the disposal of its properties and distribution of its assets. Notably, given the expected time lag between the SEC approval and the BIR tax clearance, corporations in the process of liquidation often opt to maintain a bank account for the settlement of any deficiency tax assessment by the BIR. As the SEC has clarified the two available options in the shortening of the corporate term, registered entities have the opportunity to carefully weigh the method that will better address their needs, taking into consideration the processing period, available administrative resources, and the targeted timeline for the dissolution. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the author and do not necessarily represent the views of EY or SGV & Co.CECILLE S. VISTO is a tax senior director and lead manager for the Entity Compliance and Governance Services of SGV & Co

21 March 2022

Christiene R. Matic

New VAT zero-rating rules and requirements under CREATE

Upon the effectivity of the Corporate Recovery and Tax Incentives for Enterprises (CREATE) Act on April 11, 2021, a new requirement to support the VAT zero-rating of local purchases of registered business enterprises was introduced.CREATE required registered business enterprises to prove that their local purchases of goods and services are directly and exclusively used in their registered activities to be accorded 0% VAT rating. Several issuances were subsequently published, which placed many taxpayers in limbo because of the seemingly conflicting provisions related to the VAT zero-rating of local purchases.Almost a month before the anniversary of CREATE, the Bureau of Internal Revenue (BIR) recently issued Revenue Memorandum Circular (RMC) No. 24-2022, which intends to harmonize and clarify the new VAT zero-rating rules and requirements under CREATE.CROSS-BORDER DOCTRINE NOW ‘INEFFECTUAL AND INOPERATIVE’Before CREATE, Ecozones and Freeport zones were regarded as foreign territories (by way of legal fiction) under RMC No. 74-99 and RMC No. 7-2007. Under the cross-border doctrine, sales to registered business enterprises located within these Ecozones and Freeport zones could be treated as constructive exports subject to 0% VAT.However, following the effectivity of CREATE, the cross-border doctrine is no longer applicable. This is because CREATE expressly requires registered export-oriented enterprises to prove the direct and exclusive use of their purchases of goods and services in its registered activities, a departure from the old rule which generally anchored zero-rating of purchases on being economic zone locators.To add, the availment of VAT zero-rating for registered export-oriented enterprises becomes subject to certain parameters regardless of location (i.e., time-bound as it becomes subject to the conditions and period of availment in Sections 295 and 296 of CREATE) under Section 294(E) and Section 295(D) of the Tax Code, as amended by CREATE.It now provides that the effective VAT zero-rating will only apply to the sale of goods and services rendered to persons or entities which have direct and indirect tax exemptions pursuant to special laws or international agreements to which the Philippines is a signatory.Based on these developments under CREATE, investors may now consider reassessing incentives that were previously location-based.CHANGES TO VAT ZERO-RATINGSince the effectivity of CREATE, the VAT exemption on imports and VAT zero-rating of newly registered and existing registered business enterprises (RBEs) only applied to goods and services that are directly and exclusively used in the registered project or activity of registered export enterprises. The phrase “directly and exclusively used in the registered project or activity of registered export enterprises” was explained under Q&A No. 13 of RMC No. 24-2022 as those raw materials, inventories, supplies, equipment, goods, packaging materials, services, including provision of basic infrastructure, utilities, maintenance, repair and overhaul of equipment, and other expenditures that are directly attributable to the registered project or activity, without which the registered project or activity cannot be carried out.In the case of common expenses, taxpayers were directed to adopt a method to best allocate goods or services purchased (e.g., the use of separate water and power meters among activities). Otherwise, if the proper allocation could not be determined, then the purchase of such goods will be subject to 12% VAT. The RMC also made it clear that services for administrative purposes, such as legal, accounting and other similar services, are not considered directly attributable to and exclusively used in the registered project or activity.Previously, a VAT zero-rating certificate was the only document that must be provided by a registered export enterprise to their local suppliers. However, RMC No. 24-2022 introduced additional requirements on top of the VAT zero-rating certificate, such as a photocopy of the export enterprise’s BIR Certificate of Registration, a sworn declaration stating that the goods or services being purchased are to be used directly and exclusively in the registered project, and other documents to corroborate entitlement to the VAT zero-rating.These documents include but are not limited to duly certified copies of the purchase order, job order or service agreement, sales invoices and/or official receipts, delivery receipts. Registered export enterprises should also expect some changes in the VAT zero-rating certificate that will be issued by its Investment Promotion Agency (IPA), which would now include the applicable goods and services meeting the direct and exclusive use criteria.Registered export enterprises must strictly observe the abovementioned criteria and documentation in order to prove the VAT zero-rating of its local purchases of goods and services. This means that registered export enterprises may need to factor in additional compliance requirements to avail of the VAT zero-rating and be able to sustain a claim of VAT zero-rating if eventually audited by tax authorities.The role of tax managers, compliance officers, custodians of records, and the like may have to be expanded as well to ensure that the necessary documentary requirements are secured in a timely manner, compliant with the existing requirements under our tax rules, and would still be available in the event of a tax audit.EXPORTER TAX TREATMENT BEFORE CREATEQ&A No. 23 of the same RMC clarified that registered export enterprises existing prior to CREATE continue to enjoy VAT zero-rating on their local purchases until the expiration of their incentives, as specified in the Implementing Rules and Regulations of CREATE. However, the direct and exclusive use criteria must still be met. Otherwise, sellers of goods and services will be required to pass on the 12% VAT to their registered export enterprise customers within the Ecozone.The RMC further explained that any input VAT passed on for purchases of goods and services not directly and exclusively used in the registered project or activity may no longer be used to apply for a VAT refund. Instead, the RMC presented three options that a registered export enterprise may avail of:• A VAT-registered taxpayer enjoying an income tax holiday (ITH) may claim the passed-on input VAT as credit against future output VAT liabilities; or• Accumulate the input VAT credits and claim for VAT refund upon expiration of its VAT registration (i.e., end of ITH and 5% SCIT incentive commences); or• Charge to cost or expense account if non-VAT registeredSimilarly, existing export enterprises which are already under the 5% gross income tax (GIT) and special corporate income tax (SCIT) were required to change their registration status from a VAT-registered entity to non-VAT within two months from the effectivity of RMC No. 24-2022.It must be noted, however, that the input VAT charged to cost or expense account may not qualify as a “direct cost” for an export enterprise that is already availing of the 5% GIT or 5% SCIT. In which case, there would be no tax benefit on any input VAT passed on by its local suppliers.ACTION PLAN MOVING FORWARDWith the effectivity of RMC No. 24-2022, registered export enterprises and their domestic sellers of goods and services must familiarize themselves with the new principles and additional requirements of VAT zero-rating on local purchases.Given the strict “direct use” requirements, registered export enterprises may consider performing a careful review of their local purchases of goods and services to identify whether or not they meet the criteria. Export enterprises with a more complex business structure (i.e., those with multiple registered activities) and those which incur significant amounts in common expenses may revisit their allocation method among registered and non-registered activities.Otherwise, without diligent study, a registered export enterprise may face a significant amount of input VAT that it may not be able to recover. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the author and do not necessarily represent the views of SGV & Co.Christiene R. Matic is a director from the Global Compliance and Reporting service line of SGV & Co.

14 March 2022

Rossana A. Fajardo

Opportunities for tech companies to seize in 2022 (Second Part)

(Second of two parts)As the digitalization of the world economy further accelerates, the technology sector will likely continue to grow, especially now that vaccines and proactive health and safety measures are helping manage the pandemic. In line with this, EY ranks the top 10 opportunities from its annual report that technology companies should seize for growth while navigating volatility and risks in 2022.In the first part of this article, we discussed the first five opportunities: attracting and retaining more motivated people in a hybrid workplace, strengthening growth profile with M&A, securing business continuity by de-risking supply chains, embedding security in new activity designs, and leading in ESG to strengthen stakeholder relations.In the second part of this article, we continue by discussing the remaining five: transforming the business for consumption-based sales, realigning tax organizations with digital business models, streamlining operations and increasing agility, cultivating customer trust to drive digital engagement and anticipating the transition to 5G technology.TRANSFORM BUSINESS FOR CONSUMPTION-BASED SALESDuring the pandemic, consumption-based business models offered a higher valuation from investors and better protection against economic volatility compared to traditional one-off payments. With more and more customers preferring the flexibility of cloud-based services and software, subscription payments are expected to rapidly replace traditional license payments over the next five years.In order to enable this shift, companies need to change their pricing tools, transform their sales organizations, adopt new incentive schemes, realign their major business processes and track different performance indicators. Though the transition will be challenging, companies will be rewarded with more time to build customer relations, recurring revenues, and the opportunity to generate higher revenues from each user through upselling and cross-selling.REALIGN TAX ORGANIZATIONS WITH DIGITAL BUSINESS MODELSTaxation and legislation changes are targeting the technology sector worldwide, with governments looking to shift the taxation base to capture more value from the growing economic contributions made by digital services. Sudden changes are caused by trade disputes and governments who are looking to protect or strengthen their key industries, and this often includes technology segments.Tech companies need a robust approach to global trade and taxation with regard to their large international footprints as well as their large base of assets, both material and immaterial. This approach has to be built on early planning, real-time insights and an agile operating model. STREAMLINE OPERATIONS AND INCREASE AGILITYWith the current unprecedented economic uncertainty and volatility, customer preferences are shifting overnight and causing large swings in demand. This is especially true in the technology sector. The risk profiles in the sector have also changed due to supply chains getting stretched and geopolitical factors influencing trade. This further increased the need for organizations to transform.To remain competitive, tech companies need to match operational agility with the future levels of volatility in their business. This can be achieved by leveraging data analytics, cloud capabilities and automation tools, streamlining business processes, and identifying ways to simplify the organization.CULTIVATE CUSTOMER TRUST TO DRIVE DIGITAL ENGAGEMENTDigital companies rely on trust to keep driving customers to visit, interact and share the necessary data to create a business and drive growth. Because alternatives are a click or two away, a lack of trust can instantly send customers to competitors.EY research has found that the main drivers of trust and distrust include transparency, ethics, security, regulatory compliance and content. To gain the trust of customers, companies must prioritize protecting customer data and maintain clear policies on dealing with issues that include fake content, discrimination and online abuse. A digital trust strategy that incorporates all the elements of trust has to be established.PREPARE FOR 5G ADOPTIONThe tech industry is gearing up for large-scale implementation with the rollout of 5G driving revenue across the entire technology stack. According to Reimagining industry futures, an EY survey of attitudes across multiple enterprises worldwide, a little over half of enterprises at 52% are more interested in 5G now compared to before the pandemic. This shows that 5G is not just a new connectivity standard, it is also expected to change how objects and devices interact as well as how machine learning and data analytics can be used to improve logistics, identify supply chain bottlenecks and reshape customer interaction.As many as three out of four enterprises in the survey believe that 5G will be integrated into their business processes over the next five years, but for this to happen, tech companies need to prepare adoption roadmaps and use cases to stay ahead.EMBRACING OPPORTUNITIES FROM VOLATILITY AND RISKAlthough the world is still experiencing uncertainty from geopolitical issues and the pandemic, these risks reshape the opportunities that can help tech companies develop new markets and increase their competitiveness. Regrouping organizations around security and trust to increase stakeholder commitment as well as organizational transformation and the adoption of new business models can help drive market relevance and agility. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the author and do not necessarily represent the views of SGV & Co.Rossana A. Fajardo is the EY ASEAN business consulting leader and the consulting service line leader of SGV & Co.

07 March 2022

Rossana A. Fajardo

Opportunities for tech companies to seize in 2022 (First Part)

(First of two parts)With the world now able to control the ongoing pandemic better thanks to vaccines and other health and safety measures, the technology sector will more likely continue to grow as the digitalization of the economy further accelerates. In line with this, EY shares its annual report, Value Realized, ranking the top ten opportunities that technology companies should seize this year. Companies who act on these may find opportunities for growth while navigating volatility and risks in 2022.In the first part of this article, we discuss the first five opportunities: attracting and retaining more motivated people in a hybrid workplace, strengthening your growth profile with M&A, securing business continuity by de-risking supply chains, embedding security in new activity designs, and leading in environmental, social, and governance (ESG) to strengthen stakeholder relations.ATTRACT, RETAIN MORE MOTIVATED PEOPLE IN A HYBRID WORKPLACEAlthough finding capable talent has always been a challenge and major concern in the tech sector, the pandemic only increased the urgency in addressing this issue. Companies who are investing in growth will need more salespeople to strengthen their salesforce and more engineers in their research centers.Most tech companies are discussing a partial and staged return to the physical office while trying to balance the preferences and needs of a modern workforce and manage the costs involved. A recent EY survey also cites that nine out of 10 employees demand flexibility in when and where they work and are prepared to resign if this demand isn’t met.However, although employees have mastered working from home, the hybrid model will pose new challenges related to motivating employees and work culture. Companies will need to be able to optimize flexibility, rewards and experience to present a package that can attract the best talent as well as retain them.STRENGTHEN GROWTH PROFILE WITH M&AA little over half of the technology executives surveyed in the 23rd EY Global Capital Confidence Barometer acknowledge that organic growth can be difficult in the near term, with 51% saying that they intend to pursue mergers and acquisitions (M&A) in 2022 to sustain growth. The deal market is expected to stay healthy despite increased financial uncertainty and regulatory scrutiny.Acquisitions will be able to reignite growth through the addition of technologies, distribution channels, business solutions and end markets to a company portfolio. Moreover, divestments can help companies veer away from solutions that require different capabilities from what the company possesses, as well as from market segments with slower growth. The right M&A strategy will result in a better growth profile, while divesting of non-core businesses will help reshape portfolios out of declining businesses. SECURE BUSINESS CONTINUITY BY DE-RISKING SUPPLY CHAINSSupply chains came under massive pressure from geopolitical events and market volatility, with tech companies dealing with two major bottlenecks in the past months: the availability of components and logistics. Though it can be argued that these issues are temporary and have also hit the entire industry, some have managed them better than others.Tech companies will need to carefully assess and de-risk their supply chains, all the way from the vendors of their vendors down to the customers of their customers. There is no one size solution for this; different risk profiles in the supply chain will require different policies surrounding sourcing contracts and inventories. Issues in logistics can also lead to changes in preferred manufacturing and distribution footprints, but real-time visibility can help identify bottlenecks at an early stage. Furthermore, new technologies such as digital twins, which are virtual representations that serve as real-time digital counterparts of physical objects or processes, and 3D printing could also reduce the degree of disruption.EMBED SECURITY IN NEW ACTIVITY DESIGNSData security and integrity have never been more important than during the pandemic, with more flexible ways of working introducing more sources of risk. A large number of companies had to change their IT structures in rapid response to the pandemic but were not able to sufficiently consider cybersecurity in advance. This resulted in more disruptive attacks and led to increased concerns with regulation compliance.In order to turn data integrity into a business driver and avoid major disruptions, tech companies must embed security and privacy in the design of any new activities. This includes the cyber team in the startup phase of new projects, realigning business objectives with data security, and reviewing the necessary talent profiles to do so.LEAD IN ESG TO STRENGTHEN STAKEHOLDER RELATIONSWhile tech companies have traditionally focused on sustainability, stakeholders and consumers want more, with rising expectations to drive positive environmental and social outcomes. Employees want to make a meaningful impact, and investors demand sustainable investments. Moreover, enterprise customers look to the technology sector to implement new technologies that can help drive sustainable outcomes of their own.This is why tech companies should lead by example, drawing up long-term value propositions and communicating them with their stakeholders. This includes ESG commitments supported by transparency, top-down organizational changes, and reporting on relevant key performance indicator (KPIs).In the second part of this article, we discuss the other five opportunities tech companies can seize in 2022: transforming the business for consumption-based sales, realigning tax organizations with digital business models, streamlining operations and increasing agility, cultivating customer trust to drive digital engagement, and preparing for the shift to 5G. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the author and do not necessarily represent the views of SGV & Co.Rossana A. Fajardo is the EY ASEAN business consulting leader and the consulting service line leader of SGV & Co.

28 February 2022

Katrina F. Francisco

Can ESG data and insights deliver long-term value?

Environmental, social and governance (ESG) driven approaches are rapidly becoming mainstream in the investor and corporate communities, according to the 2021 EY Global Institutional Investor Survey. This is an annual survey that the EY Global Climate Change and Sustainability services team commissioned from a third party with the main objective of examining the views of institutional investors on the use of nonfinancial information in investment decision-making.The survey notes three important themes that stand out: (1) the COVID-19 pandemic has been a powerful ESG catalyst; (2) there is a growing focus on the transition to a net zero economy, and climate change is increasingly central to investment decision-making; and (3) better quality nonfinancial disclosures and a clearer regulatory landscape, coupled with sophisticated data analytics capabilities, will enable ESG to realize its potential.THE COVID-19 PANDEMIC ACTING AS A POWERFUL CATALYSTInvestor attitudes towards ESG have undergone a rapid evolution under the pandemic. Now it’s seen as a central element to the investor decision-making process.The survey data shows that, since the pandemic started, 90% of investors are attaching greater importance to corporates’ ESG performance when making investment decisions, and 86% of those surveyed said that a robust ESG program impacts analysts’ recommendations.In addition, COVID-19 has made investors more likely to divest based on poor ESG performance with 74% saying so, while around 86% said that having a strong ESG performance impacts their decision to hold on to an investment.The way the pandemic has highlighted past and current issues on social inequality has also magnified the importance of social considerations, with consumers mobilized on social issues and investors placing a greater focus on the “S” element of ESG. The top 5 social concerns taking center stage, based on the survey, are: (1) consumer satisfaction, (2) diversity and inclusion, (3) impact on local communities, such as job creation, (4) workplace and public safety, and (5) labor standards and human rights across the value chain.Because of this, the investment industry faces a major challenge moving forward on how to access and analyze the data required to link social impact to financial performance. Without this information, it will be difficult to achieve a comprehensive inclusion of these factors into portfolio decision-making processes.CLIMATE CHANGE AT THE HEART OF DECISION-MAKINGWhen the pandemic struck, many feared that it might put an end to the growing interest of investors on climate change. This fear did not materialize.The significant progress that happened within the investment industry stems from the fact that the pandemic provided a stark and tangible example of what can happen when we fail to tackle systemic risks in our society. Investors could see what might happen to the economy if efforts to address climate change fail. This was further compounded by the results of the Intergovernmental Panel on Climate Change’s (IPCC’s) Sixth Assessment Report (AR6), which found that without “immediate, rapid and large-scale reductions” in emissions, curbing global warming to either 1.5˚C or even 2˚C above pre-industrial levels by 2100 would be “beyond reach.”Investors have become increasingly aware of the risks posed by climate change, and they want their investments to reflect their preferences. Since there is an increased pressure to address the impact of climate change, investors surveyed said that they are placing a significant focus on their portfolios’ exposure to climate risk, with 77% indicating that they are devoting time to evaluate the impact of physical risks, while 79% saying that they will devote time to evaluate the implications of transition risks, into their asset allocation and selection decisions.As decarbonization is crucial to investment decision-making, and with the goal of making progress towards net zero, it is crucial that companies and investors undertake robust scenario planning. This translates the theories related to climate change impact into practice and helps ground the discussion about incorporating decarbonization factors into an organization’s strategies so that it is not just an afterthought when considering the investment opportunities or the risks involved with operations.PERFORMANCE TRANSPARENCY AND ANALYSIS CAPABILITY IS THE FUTURE OF ESG INVESTINGWhile investors are considering ESG performance as central to their decision-making, there are two priorities that could help to realize its full potential.First is the better-quality ESG data from companies and clearer regulatory landscape. These two factors allow investors to conduct a more structured and methodical evaluation of disclosures.This is crucial as there has been an increasing concern of investors about the usefulness of key aspects of companies’ ESG disclosures, with 51% of investors saying that current nonfinancial disclosures are not able to provide insight into how companies create long-term value, which was only 41% in 2020. In addition, despite the importance of ESG performance reporting to the industry, the transparency and quality of ESG disclosures, mainly around materiality, have been an ongoing concern, where 50% of investors surveyed said that they are concerned about a lack of focus on material issues — an increase from 37% in 2020.Moreover, investor and corporate communities are broadly aligned on the importance of uniform standards and they believe that it would be helpful if risk transparency, reporting and assurance of disclosures were mandated by policy. As much as 89% of investors surveyed said they would like to see the reporting of ESG performance measures against a set of globally consistent standards become a mandatory requirement.What this will lead to will be higher quality disclosures around ESG performance, which in turn can underpin good business management to help build and preserve stakeholder trust. The actions relating to the formation and the formal launch of the International Sustainability Standards Board (ISSB) during COP26 is a step in the right direction to more globally consistent standards.Second, building data analytics capabilities and improving data management would be key to helping corporates produce trusted ESG performance reporting, with investors to incorporate that insight into their investment decision-making process.Technology and data innovation can help corporates improve the way they collect, aggregate and own their data and help investors integrate ESG data into the investment analysis.ACTIONS FOR CORPORATES AND INVESTORSAs ESG factors play an important role in economic health and recovery, there are a number of important actions for both the corporates issuing ESG reporting and the investors that will utilize that information.Corporates should consider (1) having a better understanding of the climate risk disclosure element of ESG reporting, since there is growing pressure for companies to do more, (2) making strategic use of the sustainability and finance functions to help inject rigor and factor in materiality into ESG reporting, mainly because investors are concerned about the veracity and credibility of companies’ ESG performance data, and (3) deepening engagement with investors and understand how nonfinancial disclosures help differentiate an entity from its competitors.Investors should consider (1) updating investment policies and frameworks for ESG investments along-side building an ESG-driven culture, (2) updating approaches to climate risk management to understand the potential consequences of climate risks over different time horizons, and (3) putting in place a bold and forward-looking data analytics strategy.With the increasing expectation that businesses create, protect and measure value across a broad group of its stakeholders, they can fully embrace ESG by ensuring that the risks it brings are managed and by fully taking advantage of the opportunities that come with it. This way, companies can better articulate how they are creating long-term value for all stakeholders. This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the author and do not necessarily represent the views of SGV & Co.Katrina F. Francisco is a senior director from the Climate Change and Sustainability Services of SGV & Co.

21 February 2022

John N. Panes

Shifting to a zero-trust mindset

As the world continues to operate under remotely while grappling with the pandemic, the danger of cyberattack remains a constant threat. The current situation has resulted in people using their own devices and networks to ensure business continuity from anywhere, but these are not as secure as corporate systems and connections, and cybercriminals are not letting these easy opportunities pass.Data security is more critical than ever, with traditional data protection techniques functioning under a “trust but verify” strategy. This perimeter-driven paradigm entrusts its internal users with unobstructed network access and provides security controls only for external or untrusted networks. However, this introduces the issue of misplaced trust that can lead to the IT landscape of an organization being exposed to vulnerabilities.With organizations dramatically accelerating their transformation journey, effective cybersecurity that expands beyond the organizations’ territories becomes even more significant — and this is where the concept of zero trust comes in.Zero trust is a security model based on the principle of maintaining strict access controls without trusting anyone by default, including internal users. Everyone is trusted by default in a traditional IT network, and once an attacker gets inside the network, they are free to move and gain access to protected customer data, intellectual property, or network controls. Zero-trust application security understands that attackers can be present both within and outside of a network, which is why zero-trust policy enforcement dictates that no user should be trusted automatically.With effective zero-trust frameworks in place, organizations can enforce several critical steps as part of their arsenal to reduce cyber risk while establishing access and identity controls.THE NEED TO ADAPT ZERO TRUSTNewer organizations are now adapting this model as it requires a simpler approach but at the same time yields ever stronger security controls.The “trust but verify” strategy is no longer an option as targeted, more advanced threats are now capable of moving inside the corporate perimeter. Because of the nature of remote working, accessing applications from multiple devices outside of the business perimeter has become even more prolific. This results in the increasing risk of exposure to data breaches, malware and ransomware attacks.The zero-trust paradigm requires organizations to continuously analyze and evaluate the risks that involve their business functions and internal IT assets, then form strategies to mitigate them. The zero-trust model also restricts access by only providing access to users who need it while depending on whether they successfully authenticate each access request. The purpose of this process is to help eliminate unauthorized access to services and data while employing a positive security enforcement model. Because it uses a different lens to view data protection, the zero-trust model allows certain criteria that govern access and restrictions. STEPS TO START THE ZERO-TRUST JOURNEYThe looming challenge for these organizations actually involves where to start. They can begin their zero-trust journey with three simple steps, starting with building a zero-trust center of excellence. This entails creating a cross-functional working group of all the teams that will be working together on a zero-trust architecture. This includes cybersecurity and IT teams that will handle actual deployment, as well as business leaders who will help define the necessary business objectives to ensure successful implementation.Second, the center of excellence will need to engage in workshops to ensure that everyone is aligned and understands the basic concepts of this model, the business objectives of the organization, and what to protect — data, applications, assets, and services (DAAS). The prototype zero-trust network can be planned during the workshop to allow IT and security practitioners in the organization to better move to a more formal design phase.Third, start with something low-risk, instead of proceeding ahead with the “crown jewels” of the organization. Deploy zero trust first in an environment where implementation teams can get hands-on experience and develop confidence as they build this simpler but more secure network.MAXIMIZING DATA SECURITY WITH ZERO TRUSTWhile there are many misconceptions surrounding the zero-trust architecture model, from its overall functionality to implementation, organizations can focus on five major aspects identified by Murali Rao, EY India Cybersecurity Consulting Leader, to better maximize their data security.Prioritize top risks. Organizations must understand the attack surface and threat landscape to qualify risks, before prioritizing the ones that will need the most focus.Enterprise-wide policy. Organizations will need to set policies according to the sensitivity of services, assets and data housed. The potential of zero-trust architecture relies on the access policies that organizations define.More granular network enforcement. Organizations must always assume that the network is hostile, and that they cannot trust any user or incident. This will mean removing implicit trust from the network and building trust into devices and services.Implement the zero-trust network based on an inside-out view. Organizations need to include zero-trust architecture as part of their overall transformation strategy. They will also need to implement technologies that help achieve zero trust as their transformation moves them more to the cloud and retires old legacy systems.A strong Identity and Access Management. Organizations need to work on the authentications of their workloads, devices and users. Technologies such as privilege ID management, multifactor authentication, behavioral analytics and file system permissions must be enforced based on defined rules to minimize the compromise of trust.THE KEY TO SUCCESSFUL ZERO-TRUST ARCHITECTURE ADOPTIONBreaches that result in lost or stolen data cost organizations significant financial and reputational damage. The zero-trust model aids in both simplification and standardization of access control enforcement across an enterprise with improved compliance and the continuity of critical business processes, and it is most effective when integrated across the entire digital IT estate.In an era where customers, partners and the supplier ecosystem access data and services from literally anywhere, applying a zero-trust model reduces the risks of security issues that arise due to how organizations often lean on perimeter-based approaches.This article is for general information only and is not a substitute for professional advice where the facts and circumstances warrant. The views and opinions expressed above are those of the author and do not necessarily represent the views of SGV & Co.John N. Panes is a manager from the Technology Consulting practice of SGV & Co.