Management implements Sandfire’s risk identification, management and internal control system, and reports to the Board on Sandfire’s key risks, and the extent to which it believes risks are being adequately managed.