Risk and Risk Management
The Board recognises that effective risk management requires awareness and engagement at all levels of our organisation.
Risk management process
The Board is responsible for determining the nature of the risks the Group faces, and for ensuring that appropriate mitigating actions are in place to manage them in a manner that enables the Group to achieve its strategic objectives.
Effective risk management requires awareness and engagement at all levels of our organisation. It is for this reason that the risk management process is incorporated into the day-to-day management of our business, as well as being reflected in the Group’s core processes and controls. The Board has defined the Group’s risk appetite and oversees the risk management strategy and the effectiveness of the Group’s internal control framework. Risks are considered at every business level and are assessed, discussed and taken into account when deciding upon future strategy, approving transactions and monitoring performance.
Strategic risks are identified, assessed and managed by the Board, with support from the Audit Committee, which in turn is supported by the Risk Committee. Strategic risks are reviewed by the Audit Committee to ensure they are valid and that they represent the key risks associated with the current strategic direction of the Group. Operational risks are identified, assessed and managed by the Risk Committee and Executive Committee team members, and reported to the Board and the Audit Committee. These risks cover all areas of the business, such as finance, operations, investment, development, and corporate risks.
The risk management process commences with rigorous risk identification sessions incorporating contributions from functional managers and Executive Committee team members.
The output is reviewed and discussed by the Risk Committee, supported by members of senior management from across the business. The Board, supported by the Risk Committee, identifies and prioritises the top business risks, with a focus on the identification of key strategic, financial and operational risks. The potential impact and likelihood of the risks occurring are determined, key risk mitigations are identified and the current level of risk is assessed against the Board’s risk appetite. These top business risks form the basis for the principal risks and uncertainties detailed in the section below.