2023 UEM Edgenta Annual Report

Section 7 UEM Edgenta Berhad GOVERNANCE 244 STATEMENT ON RISK MANAGEMENT AND INTERNAL CONTROL Integrity & Compliance Integrity UEM Edgenta is committed to support the national anti-corruption efforts by adopting zero-tolerance approach against all forms of corruption and embedding the integrity within our F.I.R.S.T core values. Our initiatives in preventing bribery and corruption are in line with the requirements of subsection 17A(5) of the Malaysian Anti-Corruption Commission Act 2009 by adopting the T.R.U.S.T principle. The details disclosure on our Corporate Integrity and Ethical Business Conduct can be found on pages 247 - 251 of this Integrated Annual Report Compliance UEM Edgenta’s compliance management involves a comprehensive approach to maintaining an effective compliance policy and program consistent with the applicable laws and regulations to safeguard the reputation and integrity of UEM Edgenta. UEM Edgenta’s Compliance Unit adopts the following Compliance Framework in undertaking its compliance commitment: OBJECTIVE STATEMENT To ensure a positive compliance culture through adopting the highest standards of probity and accountability in all areas of UEM Edgenta Group’s operations and businesses COMPLIANCE POLICY MATURITY LEVEL Articulating compliance commitment Upholding Responsibility Elevating good business practices LEVEL 0 - Incomplete Ad hoc & unknown LEVEL 1 - Initial Unpredictable & reactive LEVEL 2 - Process Process measured & controlled LEVEL 3 - System Proactive rather than reactive LEVEL 4 - Program Outcome measured & controlled LEVEL 5 - Effective Optimising for effectiveness GOVERNANCE STRUCTURE METHODOLOGY APPROACH Board of Directors (“Board”) Establishment of compliance reporting dashboard Board Governance and Risk Committee (“BGRC”) Establishment of Regulations listing & compliance checklist Risk Management Committee (“RMC”) Risk, Integrity & Compliance Department (“RICD”) Review of Acts & Regulations Process Owner Compliance Self-Assessment Internal Audit Function (Compliance Assurance) Compliance Function (Monitor compliance) Governance Owner (Inform new laws and regulations) Process Owner (Ensure compliance) The Compliance Framework sets out the approach for UEM Edgenta in managing regulatory compliance obligations and mitigating compliance risk, in order to achieve its compliance objective. The Compliance Unit is spearheading the compliance management process ensuring the effectiveness of the compliance process and establishing appropriate compliance monitoring to address and report on any compliance issues. The outcome of the monitoring activities is reported to the RMC, BGRC and Board.

RkJQdWJsaXNoZXIy NDgzMzc=