The constantly evolving environment and the interactions with our stakeholders present the Company with risks and opportunities. In addition, the Group has to manage risks that arise from its operations. Thus, a need arises to identify and manage risks. The systematic approach required for risk management calls for measures that ensure that risks are identified on time, evaluated in terms of risk appetite of the Group and effective management and monitoring mechanisms are installed.
The Board is primarily responsible for ensuring that the risks are identified and appropriately managed across the Group. The Audit Committee has been delegated the responsibility for reviewing the effectiveness of the Group’s Risk Management process, including the systems established to identify, assess, manage and monitor risks. The Internal Audit function also plays a key role in risk identification.
The Group Management Committee (GMC) takes the lead at the implementation level in identifying risks. The GMC examines processes and events that expose the Company into situations that could seriously reduce earnings, impair its liquidity position or create legal, regulatory or reputation risks. The GMC also evaluates options available to mitigate risks and to identify risks that do not match the risk appetite of the Group. Monitoring of risk management measures is a responsibility that rests with the GMC.
Heads of Business Units provide useful information and feed back to the GMC for risk management with the assistance of the employees of the Group
Where a risk is evaluated it takes into account the likelihood of an event and its potential impact on the business. Impacts are quantified or assessed in terms of potential loss or damage. Risks are assessed both as gross risk and net risk. The assessment of gross risk involves the potential harm it can cause without mitigating actions, whereas net risk assessment considers potential harm or loss when mitigating action is taken. Risks and their corresponding mitigating action plans are reviewed by the GMC.
Risk mapping is carried out in order to assess the likelihood of occurrence and consequences of an event/set of events:
Upon assessment of the likelihood of occurrence and the extent of the impact of each risk, it is subjected to the following matrix in order to derive the nature and intensity of action required.
The table given below sets out an assessment of risks that the strategic imperatives were subject to towards the year-end and risk mitigating actions that were/are in place:
Strategic Imperative 1 | Refine the Portfolio Mix of Our Business Continuously | |||||||||
Risk factor/implications | Composition of product portfolio: The vehicles and vehicle parts/services segment accounts for a significant share of Group’s revenues and negative changes to the fiscal policies would adversely impact on Group’s performance. | |||||||||
Key controls and mitigating actions |
|
|||||||||
Monitoring indicators |
|
|||||||||
Risk assessment | Extensive management essential |
Strategic Imperative 2 | Create Financial Value | |||||||||||||||
Risk factor/implications | Credit risk - Possibility of incurring bad debts due to adverse economic conditions/poor credit management | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Manage and monitor risk | |||||||||||||||
Risk factor/implications | Interest rate risk - Increase in interest rates impacting vehicle sales and Company’s cost of funding | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Manage and Monitor risk | |||||||||||||||
Risk factor/implications | Exchange rate fluctuation risk - fluctuations in exchange rates causing potential losses on assets & liabilities and transactions denominated in foreign currency | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Manage and monitor risk | |||||||||||||||
Risk factor/implications | Liquidity risk - Unavailability of sufficient funds impacting smooth functioning of the day-to-day operations of the Company | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Considerable monitoring required | |||||||||||||||
Risk factor/implications | IT - related risk - Loss of business/reputation resulting from break-down of IT systems and/or access by unauthorised personnel | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Considerable monitoring required | |||||||||||||||
Risk factor/implications | Obsolescence of inventory - Losses resulting from slow moving inventory items becoming obsolete | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Accept, but monitor risk | |||||||||||||||
Risk factor/implications | Natural disasters - damages resulting from natural disasters such as fire and floods | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Considerable monitoring required | |||||||||||||||
Risk factor/implications | Technological obsolescence - Loss of business and cost of being inefficient due to non-availability of latest technology | |||||||||||||||
Key controls and mitigating actions |
|
|||||||||||||||
Monitoring indicators |
|
|||||||||||||||
Risk assessment | Existence of risk is inevitable and requires monitoring |
Strategic Imperative 3 | Earn the Trust of Customers and They Keep Coming Back | |||||||||
Risk factor/implications | Loss of customer relationships - Loss of customers and resulting impact on business due to dissatisfied customers. | |||||||||
Key controls and mitigating actions |
|
|||||||||
Monitoring indicators |
|
|||||||||
Risk assessment | Monitoring and management effort worthwhile |
Strategic Imperative 4 | Nurture People and They Find it Enjoyable and Rewarding to Work with Us | |||||||||
Risk factor/implications | Sourcing and retaining suitable human resources - Adverse impacts arising from failure to recruit/retain skilled employees | |||||||||
Key controls and mitigating actions |
|
|||||||||
Monitoring indicators |
|
|||||||||
Risk assessment | Accepting the risk is inevitable. Monitoring required | |||||||||
Risk factor/implications | Labour relations - Losses from low productivity and low employee engagement as a result of industrial disputes | |||||||||
Key controls and mitigating actions |
|
|||||||||
Monitoring indicators | There were no industrial disputes during the financial years 2012/13 and 2011/12 | |||||||||
Risk assessment | Considerable monitoring required |
Strategic Imperative 5 | Have Great Relationships with Best-of-Breed Business Partners |
Risk factor/implications | Relationships with principals - Performance being adversely impacted as a result of disruptions to relationships with principals. |
Key controls and mitigating actions |
|
Monitoring indicators |
|
Risk assessment | Considerable monitoring required |
Strategic Imperative 6 | Play by the Rules |
Risk factor/implications | Non-compliance with laws and regulations - Potential exposure of the Company to financial losses, litigation and unacceptable corporate behaviour. |
Key controls and mitigating actions |
|
Monitoring indicators | There were no material non-compliance reported during the year ended 2012/13 and 2011/12. |
Risk assessment | Considerable monitoring required. |
Strategic Imperative 7 | Serve the Community | ||||||
Risk factor/implications | Social risk -
|
||||||
Key controls and mitigating actions |
|
||||||
Monitoring indicators |
|
||||||
Risk assessment | Risk may be worth, accepting with monitoring. |
Strategic Imperative 8 | Be Friendly Towards the Environment | ||||||
Risk factor/implications | Environmental risk - Loss of confidence/business opportunities/depletion of Company image due to Company not being perceived as a responsible citizen. | ||||||
Key controls and mitigating actions |
|
||||||
Monitoring indicators |
|
||||||
Risk assessment | Risk is inevitable and requires monitoring |