Risks and Risk Management Practices
Our businesses and operations are subject to
a variety of risks and uncertainties which are
no different from any other company in
general and our competitors in particular.
Such risks are the result of not only the
business environment within which we
operate but also of other factors over which
we have little or no control. These risks may
be categorised between operational,
financial, environmental, health and safety,
political, market-related and strategic risks.
We have well documented and practised risk
management policies that act as an effective
tool in minimising various risks to which our
businesses are exposed to during the course
of their day-to-day operations as well as in
their strategic actions.
Risks are identified through a formal risk
management programme with the active
involvement of business managers and
senior management personnel at both the
subsidiary level as well as at the corporate
level. Each significant risk has an 'owner'
within the Group at a senior level, and the
impact to the Group if a risk materialises and
its likelihood of crystallisation is regularly
reviewed. A risk register and matrix is
maintained, which is regularly updated in
consultation with business managers. The
risk management process is coordinated by
our management assurance function and is
regularly reviewed by our Audit Committee.
Key business decisions are discussed at the
monthly meetings of the Executive
Committee and senior managers address
risk management issues when presenting
initiatives to the Executive Committee. The
overall internal control environment and risk
management programme is reviewed by our
Audit Committee on behalf of the Board.
A strong internal control culture is pervasive
throughout the Group. Regular management
assurance visits to our operations and holding
companies are undertaken to ensure that the
Group's high standards of internal control are
maintained. The strength of a business's
internal control environment forms a
component of senior managers' performance
appraisals. Further details on the Group's
internal control environment are provided in
the annual Corporate Governance Report.
The risks that we regard as the most relevant
to our business are identified below. We have
also commented on certain mitigating actions
that we believe help us manage such risks.