Risk Management Framework (RMF) brings together systems, structures, processes and people that identify, manage and monitor risks within Fiducian. The RMF identifies risks associated with achieving strategic objectives and conducting business operations. In formulating RMF, the Board considers optimising risk by having regard to its business strategy, growth plans, resources and the interests of its stakeholders. The RMF includes a Risk Management Strategy, a Risk Appetite Statement, a Risk Register, a designated Risk Management Function and a Quality Control Assurance Program.
The Chief Risk Officer (CRO) conducts risk workshops with each Business Unit Head on a quarterly basis. During these workshops, the risks, risk descriptions, the risk controls, inherent risk ratings, residual risk ratings, risk tolerances and risk appetite are discussed. Amendments are made to the risk register to keep the risk register current. In addition, any emerging risks are also discussed. Risk Workshops are also conducted with the Investment Committee, the Audit, Risk and Compliance Committee (ARCC) and the Board.
Each Risk Owner also review risks on our risk and compliance system (TICKIT). This is where the risk owners confirm that the risk controls remain effective to mitigate the risks and that the risk ratings are appropriate.
The CRO conducts Quality Control Assurance where evidence is sighted to verify that the controls are operating effectively. The CRO monitors and reports risk activities to an independent ARCC who oversees compliance with the RMF.
Compliance of RMF is targeted towards ISO 31000 – International Risk Management Standard
The Three Lines of Defence Model is fully operational which details essential roles and duties of staff, Risk Function and Internal Audit to implement an effective RMF. A risk-aware culture is fostered and facilitated at the Board Level and cascaded down through all levels of Fiducian, supported by the embedment of the Three Lines of Defence model. There is a clear expectation that all management and employees within Fiducian are responsible for playing their respective roles in risk management effectively.