
The Audit Committee’s risk management function is assisted by a Risk Management Committee (“RM Committee”), whose members comprise senior management. The RM Committee is responsible for ensuring the effectiveness of the risk management framework of the Company, the objective of which is to provide an enterprise-wide view of the risks involved in property investment, development and management activities and a systematic process for identification, assessment, management and reporting of such risks on a consistent and reliable basis. The RM Committee is mandated to focus on key strategic risks whilst also ensuring that the business units are responsible for the day-to-day tracking, monitoring and control of risks within their operations.
The designated Risk Coordinator assists by providing the RM Committee with the quarterly status of the key strategic risk exposures and the Senior Management with a timely assessment of key risk exposures and any new emerging risks that may require assessment. The RM Committee reports quarterly to the Audit Committee on the overall strategic and operational risks positions, including mitigating measures, treatment plans and the occurrence or potential occurrence of significant risk events.
The RM Committee had, since 2002, established a formal risk management framework. Within this framework, significant business risks are identified, assessed, evaluated, monitored, managed, and reported on a regular basis. The risk governance structure of the Company is regularly reviewed against international standards and best practices in risk management. The Company recognises that the risk management process is an ongoing process and aims under its risk governance structure to continue to look for ways to improve in the following areas:
• | increase monitoring and control capabilities in its review of significant strategic business risks; | |
• | review the effectiveness of the systems of internal controls to limit, mitigate, manage and monitor identified risks; | |
• | ensure that the operating systems deliver adequate and timely information required for effective risk management; and | |
• | build on and integrate into its existing governance and management systems the appropriate tools for effective management of strategic business risks which are reflective of changes in markets, products and emerging best practices. |
The Company’s risk management framework has categorised its risks into the following main risk types:
Operating Risks
The risk management framework is integrated into the
management processes at operational levels, with the
respective management at divisional and departmental
levels being responsible for identifying, assessing,
mitigating and managing the operating risks within each
of their functional areas. The implementation and use of
a system of internal controls, and operating, reporting
and monitoring processes and procedures (including
processes involving due diligence and collation of market intelligence and feedback), supported by information
technology systems and constant development of human
resource skills through recruitment and training, are
important elements of the risk management framework,
to mitigate risks relating to product and service quality
assurance management, costs control management,
design and product innovation, market intelligence,
marketing/sales and leasing management, financial
control management and regulatory compliances in the
Company’s operations.
The maintenance of adequate insurance coverage for the Company’s assets, and the protection of and continued investment in the security and integrity of its information technology systems and database which are highly integrated with its business processes, are also part of the Company’s control processes for the protection of its assets. The Company also maintains close working relationship with its business partners and relevant authorities to keep abreast of political developments and changes in the regulatory framework and business environment.
Investment and Portfolio Risks
Risk evaluation forms an integral aspect of the Company’s
investment strategy. Balancing risk and return across asset
types and geographic regions are primary considerations
to achieve continued corporate profitability and portfolio
growth. This risk assessment includes macro and project
specific risks analysis encompassing rigorous due
diligence, feasibility studies and sensitivity analysis on key investment assumptions and variables. Each investment
proposal is objectively evaluated to fit the corporate
strategy and investment objective. Potential business
synergies including collaboration risks assessments are
identified early to ensure business partnership objectives
and visions are well-aligned and collaboration partners are
like-minded and compatible.
Treasury and Financial Risks
The Group is exposed to financial risks arising from its
operations and the use of financial instruments. The
key financial risks include credit risks, liquidity risks and
market risks, including interest rate risks and foreign
currency risks.
The Group has a system of controls in place to create an acceptable balance between the cost of risks occurring and the cost of managing the risks. The management continually monitors the Group’s risk management process to ensure that an appropriate balance between risk and control is achieved. Risk management policies and systems are reviewed regularly to reflect changes in market conditions and the Group’s activities.
It is, and has been throughout the current and previous financial year, the Group’s policy that no derivatives shall be undertaken for speculative purposes except for the use as hedging instruments where appropriate and cost efficient.
Credit Risk - The Group has a credit policy in place and the exposure to credit risk is monitored on an ongoing basis. Credit evaluations are performed on all customers requiring credit over a certain amount. The Group does not require collateral in respect of these financial assets.
Transactions involving financial instruments are entered into only with counterparties that are of acceptable credit quality. Cash and fixed deposits are placed with banks and financial institutions which are regulated.
Liquidity Risk - The Group monitors its liquidity risk and maintains a level of cash and cash equivalents, and credit facilities deemed adequate by management to finance the Group’s operations and to mitigate the effects of fluctuations in cash flows.
Interest Rate Risk - The Group’s exposure to market risk changes in interest rates relates primarily to its interest-bearing financial assets and debt obligations. The Group adopts a policy of managing its interest rate exposure by maintaining a debt portfolio with both fixed and floating rates of interest. Where appropriate, the Group uses interest rate derivatives to hedge its interest rate exposure for specific underlying debt obligations.
Foreign Currency Risk - The Group is exposed to foreign currency risks on sales, purchases and borrowings that are denominated in a currency other than the respective functional currency of the Group’s entities.
The Group manages its foreign exchange exposure by a policy of matching receipts and payments, and asset purchases and borrowings in each individual currency. Forward foreign exchange contracts are used purely as a hedging tool, where an active market for the relevant currencies exists, to minimise the Group’s exposure to movements in exchange rates on firm commitments and specific transactions.
Wherever necessary, the Group finances its property, plant and equipment purchases by using the relevant local currency cash resources and arranging for bank facilities denominated in the same currency. This enables the Group to limit translation exposure to its balance sheet arising from consolidation of the Group’s overseas net assets.
Human Resource Risks
The Company recognises human resource as an
important contributing factor towards the stable growth of the Company, and accordingly efforts are taken to
enhance the processes for recruitment, compensation,
training and development of employees. Identification of
core competencies is critical in the employee selection
and development processes, and the implementation of
performance assessment and management programs,
coupled with career development and training programs,
are part of the Company’s human resource strategy to
improve work performance, maximise competencies,
increase staff commitment and retention, and develop
further an effective succession planning program within
the organisation.
The management also supports work-life harmony programs and family-friendly policies as part of its efforts to help employees achieve a balanced life between work and family and at the same time create a quality workplace.
Crisis Risks
Operating in an environment with potential threats of
terrorism, epidemic outbreaks and information systems
failure, the management has put in place a company-wide
Business Continuity Plan (“BCP”) to mitigate the risks of
interruption and catastrophic loss to its operations and
information database arising from such potential threats.
The RM Committee is responsible for overseeing the maintenance of the BCP. Procedures and processes of the BCP include identification of alternate recovery centers, operational procedures to enable communication, continuity of critical business functions and recovery of database in the event of a crisis incident. Periodic incident management drills are conducted to familiarise employees with the emergency response and crisis management plans of the Company. The plans to carry out periodic tests on BCP, results of the tests, as well as recommendations and corrective actions are reviewed by the RM Committee annually and reported to the Audit Committee. Further enhancement during the year included the alignment of corporate BCP to various operating departments’ environmental emergency procedures.
Environmental, Health and Safety (EHS)
Risks
As a developer with extensive operations, strategic
and concerted efforts have been put in to mitigate the impact of our operations on the environment. The
Company’s EHS Policy (established in 2003) sets the
strategic direction for all departments, employees and
stakeholders to take practical effort to ensure effective
EHS management in its operations.
To manage its EHS risks, the Company has since 2003 integrated an EHS Management System within its operations, certified against the international ISO 14001 Environmental Management System and OHSAS 18001 Occupational Health and Safety Management System on an annual basis.
Through this system, the Company evaluates its key EHS risks, determining the risk level based on a risk assessment technique consisting of the likelihood of the occurrence and severity of the impact. Control measures are promptly applied to mitigate all significant EHS risks. This is done through setting objectives and targets, establishing programmes and/or putting in place work procedures and work instructions. The guiding principle of the mitigating measures is to follow the hierarchy of control, starting with elimination, and then moving to substitution, isolation, use of engineering control, use of administrative control and last of all, use of personal protective equipment.
The Company addresses climate change in its business operations and has set a target to reduce its carbon intensity emissions by 22% by 2020 from baseline year 2007 and 25% by 2030.
The Company’s EHS targets and performance are measured and regularly tracked by internal and external auditors. Gaps and possible risks are identified for prompt rectification and continual improvement.
Millennium & Copthorne Hotels plc
(“M&C”)
The risk management activity of M&C, the Group’s hotel
arm, is directed by its Executive Management Committee
led by its Chief Executive Officer, who undertake regular
reviews of (i) the risk registers, compiled and updated to
map the nature of the risks relative to their likelihood of
occurrence and severity and associated trends, and (ii) the
progress of the risk treatment plans devised to eliminate, minimise or transfer risks. Overall responsibility for the
risk management process of the M&C group lies with the
board of M&C, and the audit committee of M&C reviews,
on behalf of the board, the effectiveness of the group’s
risk management processes and other internal controls.
Information on M&C’s principal risks can be found in its
annual report for FY 2011.
On the EHS front, in 2011, M&C’s European region received formal accreditation to the OHSAS 18001 standard for its health and safety system and achieved formal accreditation to the ISO 14001 standard for its environmental management system. M&C intends to implement these systems progressively in its other operating regions.
Whilst M&C continually assesses its environment impact and actively seeks ways to reduce it through improvements in its hotel’s operating infrastructure and by modifying work practices, the hotel management also works with its suppliers to minimise the environment impact of their activities. Environmental performance is also being integrated into the operational objectives of the hotel staff. The M&C group monitors the carbon footprint for all of its owned and managed properties, and the board of M&C has set a target for the group’s energy consumption.