Risk Committee

Composition
Consists of at least 4 INEDs

Major roles and functions

To advise the Board on the Group’s risk appetite, profile and tolerance
To oversee risk management framework to identify and manage risks, including but not limited to all risk categories as defined by the Group Risk Appetite Statements and other key risks including reputational, ESG (environmental, social and corporate governance), information security and cyber risks, and risks associated with the strategic direction, new products and change initiatives of the Group
To review the Group’s risk policies, risk appetite compliance and breaches concerning the same
To consider and advise the Board on the current top and emerging risks and risk exposures relating to the Group’s business and strategies
To review the effectiveness of the Group’s risk control/mitigation tools and risk management functions
To monitor the effectiveness of controls across key risk types

Operating mode
Meet at least 4 times a year with additional meetings as the work demands

Risk Committee Report
The work done during each year is summarised in the Risk Committee Report as contained in the annual report