The objective of the Company’s risk management policies, procedures and controls is to: – Link the identification and management of risk to the achievement of business strategy and objectives – Systematically identify and proactively manage risk – Equip employees to take responsibility for managing risk and be trusted to make risk management decisions – Identify the Company’s principal market, operational, reputation and financial risks – Have in place effective systems to monitor and manage risks – Have in place reporting systems and effective internal controls, including major risks and key mitigation strategies being reported to the Board and relevant Board Committees An illustrative representation of the Company’s framework follows.