The group has a well-developed, comprehensive enterprise risk management programme (“ERMP”). KPMG continues to assist the group, through an independently managed, formal and structured approach in identifying risks, measuring its potential impact against a broad set of assumptions and initiating mitigating activities to reduce the calculated exposures to acceptable levels.

 

The group’s audit and risk committee provides oversight over the group’s risk management activities and considers the top risks.

 

Disaster recovery plans are continually reviewed for critical information management systems that could have a material impact on the group’s operations.

 

Certain of these plans are subject to regular testing and, in other cases, on-going tests to ensure they are robust and reliable.