Business Use

Document Title: Physical Security Expectations for ExternalBusiness Partners
Document Owner: Abigail King
Document Approver: Dave Dunoye
Effective Date: June 2021
Last Updated: Version 2.1, June 2021

TITLE: PHYSICAL SECURITY EXPECTATIONS FOR EXTERNAL BUSINESS PARTNERS
ScopePurpose

Background

All Suppliers with P&G Assets
This guide will help outline Procter & Gamble’s P&G’s general physical security expectations on
asset protection for suppliers, vendors, consultants, and other external business partners.
References here to “we” or “our” means P&G, and to “you” or “your” means P&G’s externalbusiness partners. Additional expectations for information security may apply and are notcontained in this document.
This guide will help outline P&G’s general expectations of protecting P&G assets (both tangible andintangible) while under your control. Our External Business Partners are a vital link in delivering
P&G business objectives. The level of security, which you provide, is critical to your future, as wellas ours. We require you, our external business partners, to demonstrate the samecommitment through your actions, training, and compliance efforts. However, it remains
your responsibility to identify and mitigate risks particular to your industry, geography, andworkforce.
The assets of Procter & Gamble can be broken down into two groups, tangible and intangible.
Tangible property may include product samples, new brand products, specialized machinery andline equipment, molds, etc. Intangible assets may include product formulas, market surveys,
trademark and patent information, product distribution records, promotional material, budgets,sales forecasts and is information that is classified according to the P&G Information SecurityClassification System (Public / Business Use / Highly Restricted / Secret) to include consumer andemployee Personal Identifiable Information (PII). Protecting P&G's proprietary information andproperty is vital to the continued success of the Company. It is also vital to your continued
business relationship with P&G. Creating and maintaining an environment which can be secured
and monitored is essential for the protection of P&G's assets.
The basics
P&G assets must be protected. You must endeavor to minimize loss due to unforeseen
circumstances, natural disaster, theft, insider threat, etcAt Risk Areas
If your site is located in an area with high crime rate (checking with your local law enforcement tounderstand crime rates would be a good start) you should be especially vigilant. Processes orprocedures that are not audited for quality and/or lack of internal controls are also increase the riskor loss.
Training and prevention
P&G expects its external business partners to develop and maintain processes to minimize anddetect loss. This includes your proactive training of your employees and suppliers on how to handle
common situations consistent with P&G expectations and with the law. Recurring areas of concern
can include:• Theft• Loss or damage of goods during transportation• Supply chain contamination• Counterfeit• Failing to operate within standard operating procedures• Lack of internal controls to limit access• Failure to audit effectiveness of organizational procedures and policies
DOCUMENT OWNER: Abigail King
Last update： June 2021

Page 1

Business Use•

Lack of risk assessment

The above is a partial list only. You must take responsibility anytime your employees or agents
interact P&G assets. You should seek the help of qualified counsel on situations specific to yourbusiness to ensure such risks are minimized. You must not allow business needs to justify
something that violates the law or is inconsistent with P&G’s commitment to integrity. Failure tocomply with these expectations may result in the loss of P&G business, in addition to possible legal
consequences. If you find that there is suspected asset loss or damage, you must immediately
inform your P&G contact.
Why this matters
It is also vital to your continued business relationship with P&G. Creating and maintaining anenvironment which can be secured and monitored is essential for the protection of P&G's assets

This document provides a general overview only. It does not represent the complete policy of P&G and is not legal
advice. It does not provide an exhaustive treatment of all legal issues or risks in this topic area, nor does it affect any
contract or agreement you may have with P&G. It also does not substitute for your responsibility to comply with all
relevant laws, develop effective training programs to identify and mitigate risk, and seek advice from qualified counsel
in particular situations.

DOCUMENT OWNER: Abigail King
Last update： June 2021

Page 2