Altria Group Standards for Compliance and Integrity

1. Each operating company and corporate function must have a specific management structure for carrying out its Compliance and Integrity activities. 

2. Each operating company and corporate function will define appropriate Compliance and Integrity accountabilities with appropriate business and individual objectives.

3. Each operating company and corporate function will develop an annual Compliance and Integrity plan outlining the concrete steps it will take during the year to meet these Standards. For the operating companies, annual Compliance and Integrity plans will be reviewed for adherence to these Standards by its CEO and by the Corporate Chief Compliance Officer (CCO). For the corporate functions, the plans will be similarly reviewed by its Senior Vice President and the Corporate CCO.

4. The annual Compliance and Integrity plans will be based on a systematic risk assessment process that identifies potential legal, policy and reputational risks relevant to the business or function. The risk assessment process must incorporate internal and external inputs and link to the strategy, budget and planning cycle of the operating company or corporate function. 

5. The senior management of each operating company and corporate function will regularly communicate the importance of Compliance and Integrity. Strong Compliance and Integrity messages will be a part of employee orientation and business training programs at every level.

6. Each operating company and corporate function will develop and implement Compliance and Integrity training and communications programs to educate employees on both their overall obligations and on specific risk areas related to their jobs. These training and communications programs will be reviewed periodically for coverage and effectiveness.

7. Each operating company and corporate function will develop appropriate user-friendly mechanisms for employees to receive guidance on Compliance and Integrity issues and to report any concerns or problems without fear of retaliation. The purpose and availability of these mechanisms will be communicated to employees, and the effectiveness of these communications will be reviewed periodically.

8. Investigations of, and sanctions for, violations of our Compliance and Integrity policies will be based on consistent standards and procedures.

9. Compliance and Integrity plans will include, as appropriate, monitoring, auditing and evaluation tied to the priorities established in the plans and risk assessment processes, and will lead to specific action steps to promote continuous improvement.

10. Each operating company and corporate function will document its due diligence in carrying out its Compliance and Integrity responsibilities under these Standards.

11. The Corporate CCO will review the Compliance and Integrity programs developed under these Standards regularly with the Corporate Management Committee and the Audit Committee of the Board of Directors.

Related Information

On Altria.com:

• Corporate Governance
• Altria Group's Corporate Structure