2022 PPS NAMIBIA INTEGRATED REPORT

effectiveness of combined assurance arrangements; • Annually reviewing the risk bearing capacity of the Group in the light of its reserves, insurance coverage, guarantee funds or other such financial structures for approval by the PPS Boards; • Overseeing that a process to conduct regular periodic independent assessments of the risk management function and risk management system is in place; • Reviewing the risk reports and adequate disclosure of the Group’s risks and opportunities; • Considering, in particular, the management of Information Technology risks; • Providing feedback to PPS Group Boards and their committees on identified risks that may be relevant for those particular Boards and their committees; • Providing assistance to the Board in discharging its responsibilities for disclosure in relation to risk management in the integrated report; • Assisting the Board in developing its risk management strategy; • Assisting the Board in evaluating the adequacy and effectiveness of the risk management system; • Assisting the Board in identifying and monitoring all material risks to ensure that its decision-making capability and accuracy of its reporting is adequately maintained; • Introducing measures to enhance the adequacy and effectiveness of the risk management system. The PPS Boards have delegated to the PPS Group Audit Committee an oversight role of financial reporting, accounting, the external auditor, appropriate internal controls and the internal auditors, and regulatory compliance, inter alia to ensure the integrity of reporting and financial controls. The internal control systems continue to be enhanced and developed to safeguard the assets of PPS and to ensure timely and reliable monitoring and reporting. These controls encompass suitable policies, processes, tasks and behaviours with the aim of ensuring compliance with applicable laws and regulations to meet the needs of an ever-changing business environment. The PPS Group Audit Committee’s mandate from the Board is indicated on pages 93 to 94. The following control functions within the Group are responsible for discharging the operations of risk management: Risk management • Assessing the appropriateness of the Group’s policies, processes, and controls in respect of risk management and the effective monitoring thereof by the Group; • Directing and assisting in the co-ordination and monitoring of risk management activities within the Group; • Ensuring adherence to the Risk Management Plan; • Maintaining the Enterprise Risk Management Framework and Plan for approval by the Board in terms of the appropriate international standards (ISO 31000) and the King Code of Governance Principles; • Update the PPS Group Enterprise Risk Management Framework; • Attend to recommendations from the Board, Risk Committee, Management and applicable regulators; • Providing technical guidance to management in executing their risk management duties; • Maintain and update the risk matrix for the Group. This includes the identification, assessment, monitoring, mitigation and reporting around the current and emerging risks emanating from regulated and non-regulated entities within the Group on an individual and aggregated level; • Report on the Group’s risk profile, material changes to the risk profile and details on the risk exposure and mitigating actions; • Report to the Audit Committee and Risk Committee on the implementation of the combined assurance framework; 39. Management of risks (continued) 169 Notes to the Consolidated Financial Statements

RkJQdWJsaXNoZXIy MTY2ODY3Ng==