Risk management of ICT and information security forms part of the Group’s enterprise risk management process and regular assessments ensure that risks associated with information security and cyber security are appropriately highlighted, positioned and prioritised within the Group.