Just Annual Report and Accounts 2020

JUST GROUP PLC Annual Report and Accounts 2020

32

Risk management

The Group’s enterprise-wide risk management strategy is to enable all colleagues to take more effective business decisions through a better understanding of risk

PURPOSE We use risk management to make better informed business decisions that generate value for shareholders while delivering appropriate outcomes for our customers and providing confidence to other stakeholders. Our risk management processes are designed to ensure that our understanding of risk underpins how we run the business. RISK FRAMEWORK Our risk management framework is continually developing to reflect our risk environment and emerging best practice. The framework, owned by the Group Board, covers all aspects of risk management, including risk governance, reporting and policies. Our appetite for different types of risk is embedded across the business to create a culture of confident risk taking. RISK EVALUATION AND REPORTING We evaluate our principal and emerging risks and decide how best to manage themwithin our risk appetite. Management regularly reviews its risks and produces reports to provide assurance that material risks in the business are being appropriately mitigated. The Risk function, led by the Group Chief Risk Officer (“GCRO”), challenges the management team on the effectiveness of its risk evaluation and mitigation. The GCRO provides the Group Risk and Compliance Committee (“GRCC”) with his independent assessment of the principal and emerging risks to the business.

Embedding governance via three lines of defence

2 ND LINE

1 st LINE

business operations The first level of the control environment is the business operations which perform day-to-day risk management activity

oversight functions Oversight functions in the Company, such as Risk Management, Compliance and Chief Actuary, support the Board in setting risk appetite and defining risk and compliance policy Risk & Control • Oversight of the risk and control environment • Independent challenge and reporting on the risk profile and conduct of the business • Monitoring actions being taken to mitigate ris k

Risk & Control • An established risk and control environment

Powered by