The Board carries the ultimate responsibility for the governance of risk, even though it delegates the governance of risks to the Audit and Risk Committee. Along with the board, the Audit and Risk Committee, sets out an integrated risk assessment and combined assurance plan that provides guidance on risk management of throughout decision-making and business operations processes.
The Board and executive management have compiled a detailed analysis of the operations of L2D, noting the most significant risks. The Board is in the process of setting a level of risk tolerance for L2D in pursuit of its business goals in line with its vision to create sustainable value and growth. The effect of risks is evaluated and considered through financial performance, social and environmental impacts.
Executive management is responsible for the implementation, monitoring and reporting of an effective risk management plan. The operational risk register of L2D is reviewed monthly, with risks analysed in detail, and updated by the executive management committee. The members include executive and senior management from the operational and finance function of L2D.
The operational risk register is presented to the Audit and Risk Committee quarterly for discussion and approval before being presented to the Board for final approval. During the quarterly meetings, all material non-compliance is evaluated, and an operational plan of action established to address non-compliance. The control environment implemented to mitigate the residual risks to acceptable levels is evaluated on a continuous basis to ensure relevance and effectiveness in mitigating identified operational risks.
All identified risks are assigned to risk owners which takes responsibility for the daily monitoring risk handling. All changes within the risk environment are recorded in the combined assurance plan. The identification, evaluation and management of risk is an ongoing process and is updated regularly at Board and management level.
The Board continues to drive efforts to educate stakeholders on how risks affect operational and strategic decisions and ensure that risks are being managed appropriately.