The Board Risk Review Committee consists of two (2) Independent/Non-Executive Board Directors. The Committee is chaired by Ms Aruni Goonetilleke, and Corporate Services (Private) Limited, the Secretaries of the Company function as the Secretaries to the Board Risk Review Committee. The Group Managing Director has a standing invitation to meetings and the Group Chief Financial Officer, Sector Business Heads and Heads of Finance attend meetings on request. The Charter for the Board Risk Review Committee is in line with the best practice framework and was set up in November 2020. The Charter will be reviewed annually and updated to reflect current developments and to include other matters considered necessary by the Committee.

Meetings

The Committee met two (2) times since its inception on 4th November 2020. The attendance of the Committee members at each of these meetings is as follows;

Attendance

Mrs A Goonetilleke (Chairperson) – Independent Non-Executive
2 of 2 meetings

Mrs S Ratwatte (Member) – Independent Non-Executive
2 of 2 meetings

The Board Risk Review Committee

The Board Risk Review Committee is appointed by the Board as per the Section D.2 of the Code of Best Practice of the Corporate Governance Act of 2017. The Purpose of the Committee is to establish a Risk Management Policy and Framework to safeguard shareholders’ investments and the Company’s assets and to oversee and approve the Company wide risk management practices to assist the Board in:

• Overseeing that the executive team has identified and assessed all the key risks that the organisation faces and has established a risk management infrastructure and mitigation plan capable of addressing those risks
• Overseeing the monitoring of applicable risks such as strategic, financial, credit, market, liquidity, security, property, IT, legal, regulatory, reputational, and other risks
• Overseeing the division of risk-related responsibilities and performing a gap analysis to determine that the oversight of any risks is not missed
• In conjunction with the full Board, approving the Company’s enterprise-wide risk management policy and framework

The Responsibility of the Committee

• The establishment and implementation of a risk management framework for identification of financial and non-financial risks of the Group, monitor, assess and the development of strategies to manage and mitigate those risks
• Periodically reviewing the Group’s Risk Management Policy and disclosing, in relation to each reporting period, whether such a review has taken place
• Carrying out any processes or procedures required by the Group’s Risk Management Policy as amended from time to time
• Review of compliance with approved Risk Management Policy
• Monitor the organisation’s Risk Profile Matrix, its ongoing and potential exposure to risks of various types

Conclusion

The Board Risk Review Committee has periodically evaluated the risk identification and assessment process of risks in the business units/sectors and mitigation actions taken to control or eliminate the potential business risks. The evaluation is based on the risk matrix given the probability of occurrence of the event and the potential impact to the business.

The Committee is of the view that the adequate risk mitigation controls and procedures are in place at Business Unit level to provide a reasonable assurance that businesses are safeguarded from the potential risks identified.

On behalf of the Board Risk Review Committee.

A Goonetilleke
Chairperson Board Risk Review Committee
25 May 2021