Management implements Sandfire’s risk management and internal control system, and reports to the Board on Sandfire’s key risks, and the extent to which it believes that risks are being adequately managed.