Wah Seong Corporation Berhad Annual Report 2018

Periodic site visits to operating units are undertaken by the members of the Executive Committee and/or the members of the Board whenever deemed appropriate. The Group’s system of risk management and internal control applies principally to Wah Seong Corporation Berhad and its subsidiaries. Associate companies and joint ventures have been excluded because the Group does not have full management control and/or majority Board representation. RISK MANAGEMENT FRAMEWORK The RMC principally develops, executes and maintains the risk management system to ensure that the Group’s corporate objectives and strategies are achieved within the acceptable risk appetite of the Group. Its reviews cover responses to significant risks identified including non-compliance with applicable laws, rules, regulations and guidelines, changes to internal controls and management information systems, and output from monitoring processes as well as continual review process of identified risks and effectiveness of mitigation strategies and controls. REVIEW OF THIS STATEMENT As required by Paragraph 15.23, Chapter 15 of the Main Market Listing Requirements of Bursa Malaysia Securities Berhad, the external auditors have reviewed this Statement on Risk Management and Internal Control. Their limited assurance review was performed in accordance with Audit and Assurance Practice Guides (“AAPG”) 3 issued by the Malaysian Institute of Accountants. AAPG 3 does not require the external auditors to form an opinion on the adequacy and effectiveness of the risk management and internal control systems of the Group. Risk Management Framework Diagram STEP 1 Establish the Context • Key objectives for risk management • Risk Appetite STEP 2 Risk Identification • Indentify internal and external significant risk • Recognise risk areas • Risk Categories STEP 5 Risk Treatment • Accept • Avoid • Transfer • Reduce Likelihood and/or Impact STEP 3 Risk Assessment • Gross Risk Assessment • Net Risk Assessment • Likelihood, Impact and Risk Matrix STEP 4 Risk Evaluation • Evaluate acceptable or unacceptable risks • Prioritise risks for treatment Review and Monitoring Communication and Consultation Statement on Risk Management and Internal Control ANNUAL REPORT 2018 67