Effective risk management The Group’s Enterprise-wide Risk Management (“ERM”) policy follows the international COSO (Committee of Sponsoring Organisations of the Treadway Commission) framework and defines the risk management objectives, methodology, risk appetite, risk identification, assessment and treatment processes and the responsibilities of the various risk management role-players in the Group.