CFSL Annual Report 2024

Risk Management Report (continued) • The Group’s risk management governance structure begins with oversight by the Board of Directors, either directly or through its Committees to ensure that decision-making is aligned with the Board’s approved risk appetite. • The established Board Committees - Risk Management Committee, Audit & Compliance Committee, Corporate Governance and Conduct Review Committee - drive the overall risk management governance. • The aggregate enterprise-wide risk profile and portfolio appetite are discussed at the respective risk management forums and further reported quarterly to the Risk Management Committee. • The Executive Management is responsible for translating the high-level overall guidance from the Board into operational aspects and then monitoring and reporting to the Committees. The Risk Management Team and Compliance Team are independent of the Business Units. • The Risk Management Team is responsible for identifying, measuring, monitoring and reporting significant risks across the organisation. • The Compliance Team ensures that there are appropriate controls in place to comply with applicable laws and regulations, and escalate significant noncompliance matters to Management and to the Audit & Compliance Committee. STRATEGIC LAYER MANAGEMENT LAYER Board of Directors Management Board Committees Risk Management Team Compliance Team L1 L2 L3 L3 L3 Portfolio & Credit Risk Forum (PCF) Debtors Monitoring Committee (DMC) Assets & Liabilities Committee (ALCO) Policies & Process Review Forum (PPF) Operational Risk Forum (ORF) Risk Analytics Forum (RAF) Management Committees / Risk Forums UNDERPINNED BY OUR RISK MANAGEMENT PROCESS IDENTIFY MITIGATE ASSESS MONITOR REPORT & ESCALATE Key risks to the achievement of business objectives (value growth & value preservation) Using appropriate controls and management actions The potential impact and likelihood The potential for internal and external changes to risks and the continued efficacy of controls Regularly and proactively to the Risk Management Forums and the sub-committees of the Board Risk Management Committee Independent Directors 2/4 No. of Meetings4 80

RkJQdWJsaXNoZXIy MzQ3MjQ5