206 Reporting criteria Assurance Report of the Independent Auditor (of non-financial indicators) Basis for our conclusion Introduction M.J. van der Vegte Amsterdam, February 13, 2024 Deloitte Accountants B.V. Sustainability Review Other Information Financial Statements Report of the Supervisory Board Report of the Executive Board We have performed our examination in accordance with Dutch law, including Dutch Standard 3000A ‘Assurance-opdrachten anders dan opdrachten tot controle of beoordeling van historische financiële informatie (attest-opdrachten)’ (Assurance engagements other than audits or reviews of historical financial information (attestation engagements)). This engagement is aimed to obtain limited assurance. Our responsibilities under this standard are further described in the ‘Our responsibilities for the examination of the KPIs’ section of our report. We are independent of Heineken N.V. in accordance with the ‘Verordening inzake de onafhankelijkheid van accountants bij assurance-opdrachten’ (ViO, Code of Ethics for Professional Accountants, a regulation with respect to independence) and other relevant independence regulations in The Netherlands. This includes that we do not perform any activities that could result in a conflict of interest with our independent assurance engagement. Furthermore, we have complied with the ‘Verordening gedrags- en beroepsregels accountants’ (VGBA, Dutch Code of Ethics). We believe that the assurance evidence we have obtained is sufficient and appropriate to provide a basis for our conclusion. Limitations to the scope of our assurance engagement In the sustainability data, the calculations to determine KPIs are partly based on assumptions and sources from third parties. The assumptions and sources used are disclosed on page 182 to 196 of the annual report in the section ‘Reporting basis of non-financial indicators’. We have reviewed that these assumptions and external sources are appropriate, but we have not performed procedures on the content of these assumptions and external sources. Also we note that in accordance with the reporting criteria we evaluate whether compliance of a KPI is substantiated by either a third-party verification or other information provided by third parties for example evidenced by a certificate or confirmation (together: "third party info”). We have not performed any procedures on the objectivity or competence of the third party or its processes underpinning this third party info. The references to external sources or websites in the sustainability information are not part of the sustainability data as included in the scope of our assurance engagement. We therefore do not provide assurance on this information. The reporting criteria applied for the preparation of the KPIs are disclosed on page 182 to 196 of the annual report in the section ‘Reporting basis of non-financial indicators’. The comparability of KPIs between entities and over time may be affected by the absence of an uniform practice on which to draw, to evaluate and measure this information. This allows for the application of different, but acceptable, measurement techniques. Consequently, the KPIs need to be read and understood together with the reporting criteria used. Our conclusion is not modified in respect to these matters. Responsibilities of the Executive Board and the Supervisory Board for the KPIs The Executive Board is responsible for the preparation of the KPIs in accordance with the reporting criteria as included in the ‘Reporting Criteria’ section, including the identification of the intended users and the definition of material matters. The Executive Board is also responsible for selecting and applying the reporting criteria and for determining that these reporting criteria are suitable for the legitimate information needs of stakeholders, taking into account applicable law and regulations related to reporting. The choices made by the Executive Board regarding the scope of the KPIs and the reporting policy are summarised on page 182 - 196 of the annual report. Furthermore, the Executive Board is responsible for such internal control as it determines is necessary to enable the preparation of the KPIs that are free from material misstatement, whether due to fraud or errors. The Supervisory Board is responsible for overseeing the reporting process of Heineken N.V. Our responsibilities for the examination of the KPIs Our responsibility is to plan and perform the examination in a manner that allows us to obtain sufficient and appropriate evidence to provide a basis for our conclusion. Procedures performed to obtain a limited level of assurance are aimed to determine the plausibility of information and vary in nature and timing from, and are less in extent, than for a reasonable assurance engagement. The level of assurance obtained in review is therefore substantially less than the assurance obtained in an audit. We apply the ‘Nadere voorschriften kwaliteitssystemen’ (NVKS, Regulations for quality management systems) and accordingly maintain a comprehensive system of quality control including documented policies and procedures regarding compliance with ethical requirements, professional standards and applicable legal and regulatory requirements. We have exercised professional judgement and have maintained professional scepticism throughout the review, in accordance with the Dutch Standard 3000A, ethical requirements and independence requirements. Our review included among others: Performing an analysis of the external environment and obtaining an understanding of relevant social themes and issues, and the characteristics of the company including a media search to identify relevant risks and issues within the scope of the assurance engagement during the reporting period. Evaluating the appropriateness of the reporting criteria used, their consistent application and related disclosures for the KPIs. This includes the evaluation of the results of the stakeholders’ dialogue and the reasonableness of estimates made by the Executive board. Obtaining through inquiries a general understanding of control environment, processes and information systems relevant to the preparation of the KPIs, but not to obtain assurance evidence about their implementation or their operating effectiveness. Obtaining an understanding of the procedures performed by the internal audit department and the external subject matter experts of Heineken. Identifying areas of KPIs with a higher risk of misleading or unbalanced information or material misstatements, whether due to errors of fraud. Designing and performing further assurance procedures aimed at determining the plausibility of the sustainability data responsive to this risk analysis. These procedures consisted amongst others of: - interviewing management responsible for the sustainability strategy, policy and results; - interviewing relevant staff responsible for providing the information for, carrying out internal control procedures on, and consolidating the data for the KPIs; - for certain KPIs involving component auditors to enhance our understanding for 5 key locations, validating source data and evaluating the design (and implementation) of internal controls and validation procedures; - obtaining assurance information that the sustainability data reconciles with underlying records of the company; - reviewing, on a limited test basis, relevant internal and external documentation; - performing an analytical review of the data and trends. Evaluating the consistency of the KPIs with the information in the annual report which is not included in the scope of our review. Evaluating the presentation, structure and content of the sustainability data. Considering whether the sustainability information as a whole, including the disclosures, reflects the purpose of the reporting criteria used. We communicate with the supervisory board regarding, among other matters, the planned scope and timing of the review and significant findings that we identify during our review. Heineken N.V. Annual Report 2023

Jaarverslagen en Personeelsbladen Heineken

Jaarverslagen | 2023 | | pagina 206