Award interview – key points

1. Business/risk management rationale for introducing/improving your risk management

programme
a. The organisation is beginning to understand the importance of linking strategy to
risk management
b. Risk management helps in managing strategic objective of the organisation
c. Introducing structured way of assessing risk through risk identification,
understanding the root cause and impact, and develop mitigation actions to
reduce/eliminate the risks

2. Improve collaboration between Internal Audit (IA), Risk and Compliance

a. IA findings will increase the risk rating of the organisation’s risk profile
b. ER will communicate high risk area to IA to be included in audit programme
c. Compliance to ensure action plans are executed

3. Value added support

a. Support the Governance Oversight Committee (GOC) in being able to tackle strategic
issues faced by company e.g. improvement of B40 community

4. Challenges
a. Risk management is new in the organisation
b. We are going to embark into transformation change i.e. way people think and do
work
c. Institutionalise risk management at department, division and corporate level

5. Measurable benefits/impact of your work

a. Established project risk assessment
b. Risk clinic is available every Monday for anyone to engage with ER
c. Driver of digitalisation initiative
d. Risk assessment is required for new projects and business proposal submitted to the
Board