The committee is constituted as a statutory committee in respect of its obligations prescribed by the Companies Act, and as a committee of the Board in respect of all additional duties assigned to it by the Board.
The committee, comprising non-executive and executive directors, is chaired by an independent non-executive director, and meets at least twice a year. Its members are N Mjoli-Mncube (Chairman), P H Staude (CEO), F Jakoet, T N Mgoduso, C B Sibisi and M H Munro (in his capacity as Chief Risk Officer). Several members of the company executive and senior managers (responsible for SHE, broader sustainability aspects, socio-economic development, stakeholder engagement and ethics, amongst others) attend this meeting by invitation. M A C Mahlari is the secretary. The chairman of the committee reports to the Board on all matters discussed by the committee within its mandate as well as providing minutes of all its activities and decisions taken.
The purpose and functions of the committee are to assist the Board to discharge the statutory requirements of the Companies Act articulated under regulation 43(5), covering amongst others, areas of social and economic development, corporate citizenship, environment, health and employee and public safety, consumer relationships, labour and employment equity. The committee has additional responsibilities assigned to it by the Board which include the total process of risk management and governance, including amongst others overseeing the development and regular review of a policy and plan for risk management for approval to the Board; reviewing the implementation of the risk management strategy and policies by means of risk management systems and processes.
During the period under review, the committee carried out a self-evaluation of its performance. The results of the self-evaluation process reflected that the committee was satisfied with how it executed its responsibilities and fulfilled its mandate during the period under review.
The Risk, SHE, Social and Ethics Committee submits its report to the shareholders as required by the Companies Act and recommended by King III, illustrating how it discharged its statutory responsibilities and acted in accordance with the requirements of its terms of reference for the period to 31 March 2014:
1. | Statutory Duties The company is committed to economic sustainability and to this end, continues to assess its business approach to empowerment and preferential procurement, taking into account employment equity, skills development and broad-based black economic empowerment within the South African context. The company’s B-BBEE rating audit was conducted for the period under review and Tongaat Hulett was categorised as being a Level 3 contributor. Good corporate citizenship Safety, health and environment Consumer relationships |
2. |
Terms of Reference |
3. |
Duties Assigned by the Board |
4. |
Relationship with Other Board Committees Further, the company’s standing on the recommendations espoused in the Organisation for Economic Cooperation and Development (OECD) regarding corruption and employment equity, are reviewed and covered by the Audit and Compliance Committee (which ensures the company has adopted effective systems of internal control, has an independent external auditor and operates within an approved code of ethics, amongst others) and the Remuneration Committee (which considers the company’s employment equity report). |
5. |
Sustainability Reporting |
6. |
Attendance |
While the Board is ultimately responsible for risk management, company management has designed and implemented a risk management framework and has committed the company to a process of risk management that is aligned to King III and to the company’s corporate governance responsibilities. This commitment is reflected in management’s continued attention to the importance of effective risk management in ensuring that business objectives and strategies are met and that continued, sustained growth and profitability is achieved. The framework, which incorporates the risk management policy, strategy and plan, aims to ensure that risk management processes are embedded in critical business activities and functions, and that risks are undertaken in an informed manner and pro-actively managed in accordance with the business risk appetite. This includes identifying and taking advantage of opportunities as well as protecting intellectual capital and assets by mitigating adverse impacts of risk.
The risk management review process seeks to achieve the correct balance between the issues that are specific to, and appropriately managed in, an operational area and those issues that are significant enough or cross cutting enough to be considered, and managed in an appropriate way, on a Tongaat Hulett wide basis. The approach to risk management includes being able to identify, describe and analyse risks at all levels throughout the organisation, with mitigating actions being implemented at the appropriate point of activity. The very significant, high impact risk areas and the related mitigating action plans are monitored at an executive level. Risks and mitigating actions are given relevant visibility at various appropriate forums throughout the organisation.
Tongaat Hulett has documented its approach towards Information and Communication Technology (ICT) in various documents such as the ICT governance framework (including the company’s policy and charter), disaster recovery plans, business continuity plans, acceptable use policy and a record of the approach to the protection and control of ICT documentation. The IT systems and application controls in the multiple computer systems in the various operations are, inter alia, subject to internal audit processes on an ongoing basis, integral to the audit of the overall control environment.
The current business environment is recognised as having many changing and challenging elements, particularly in the context of the volatile global economy and specific localised dynamics. Most of Tongaat Hulett’s business platforms and operational areas are not considered to be in a static, steady state. Consequently, rather than relying purely on periodic reviews, there is a continued and increasing adoption of a project management approach and use of project management skills in various management processes, including risk management. The ongoing, routine risk management processes are thus coupled with change management and specific, task based, project driven risk management initiatives.
company-wide systems of internal control exist in all key operations to manage and mitigate risks and a Combined Assurance Strategy and Plan has been implemented to further enhance the co-ordination of assurance activities. Tongaat Hulett’s Combined Assurance Plan provides a framework for the various assurance providers to work together to provide assurance to the Board, through the Audit and Compliance and Risk, SHE, Social and Ethics Committees, that all significant risks are adequately managed. The Plan consists of “three layers of defense”, being management, functional oversight and independent assurance providers, wherein the assurance on the risk management and related controls for the company is reported.
Appropriate business continuity plans and resources have been identified in order to ensure the implementation of recovery procedures, where potential risks have been identified as having the possibility of constituting a disaster.
The Tongaat Hulett internal audit function, which is supported by its internal audit service provider, KPMG, has performed a review of the effectiveness of the company’s internal control environment, including its internal financial controls, and the effectiveness of its risk management process. The evaluation of the company’s risk management processes included a review undertaken by KPMG. It noted Tongaat Hulett’s positioning, for the review period, on the KPMG Risk Maturity Continuum as “mature” out of a possible range of “basic – mature – advanced”. Consequently, the company’s internal audit function has provided independent assurance to the Audit and Compliance and Risk, SHE, Social & Ethics Committees and the Board on the effectiveness of its risk management processes.
For the period under review, the Tongaat Hulett Board, assisted by the abovementioned committees, is of the view that the internal control environment and the risk management processes in place for the company are effective.