Effective risk management plays an integral part in ensuring that the Group’s strategic intent and performance targets are met. Attacq has implemented enterprise risk management which is reviewed and amended by the Audit and Risk Committee annually.
The enterprise risk management outlines and prescribes the risk management process and is applicable across the Group and its subsidiaries. Attacq’s enterprise risk management process is based on the ISO 31000: 2009 – risk management principles and guidelines.
The Board takes ultimate responsibility for risk management and has delegated oversight responsibility to the Audit and Risk Committee. Management has to ensure effective systems are in place to manage risk.