91 Annual Report 2024 internal controls together with corrective measures recommended by the internal and external auditors are reported to and reviewed by the ARC. The ARC also reviews the adequacy and effectiveness of the measures taken by the Manager on the recommendations made by the internal and external auditors in this respect. The Board has received assurance from the CEO and the Chief Financial Officer (CFO) of the Manager that the financial records of the CICT Group have been properly maintained and the financial statements for FY 2024 give a true and fair view of the CICT Group’s operations and finances. It has also received assurance from the CEO, the CFO and the relevant KMP who have responsibility regarding various aspects of risk management and internal controls that the systems of risk management and internal controls within the CICT Group are adequate and effective to address the risks (including financial, operational, compliance and IT risks) which the Manager considers relevant and material to the current business environment. The CEO, the CFO and the relevant KMP of the Manager have obtained similar assurances from the respective risk and control owners. In addition, for FY 2024, the Board received halfyearly certification by Management on the integrity of financial reporting and the Board provided a negative assurance confirmation to Unitholders as required by the Listing Manual. Based on the ERM Framework established and the reviews conducted by Management and both the internal and external auditors, as well as the assurance from the CEO and the CFO, the Board is of the opinion that the systems of risk management and internal controls within CICT Group are adequate and effective to address the risks (including financial, operational, compliance and IT risks) which CICT Group considers relevant and material to the current business environment as at 31 December 2024. The ARC concurs with the Board in its opinion. No material weaknesses in the systems of risk management and internal controls were identified by the ARC and the Board in the review for FY 2024. The Board notes that the systems of risk management and internal controls established by the Manager provide reasonable assurance that the CICT Group, as it strives to achieve its business objectives, will not be significantly affected by any event that can be reasonably foreseen or anticipated. However, the Board also notes that no system of risk management and internal controls can provide absolute assurance in this regard, or absolute assurance against poor judgement in decision-making, human error, losses, fraud or other irregularities. Group’s risk appetite and reports to the Board on its decisions on any material matters concerning the aforementioned; (d) making the necessary recommendations to the Board such that an opinion regarding the adequacy and effectiveness of the risk management and internal controls systems can be made by the Board in the annual report for CICT in accordance with the Listing Manual and the Code; and (e) considering and advising on risk matters referred to it by the Board or Management, including reviewing and reporting to the Board on any material breaches of the RAS, any material non-compliance with the approved framework and policies and the adequacy of any proposed action. The Manager adopts an Enterprise Risk Management (ERM) Framework which sets out the required environmental and organisational components for managing risks in an integrated, systematic and consistent manner. The ERM Framework and related policies are reviewed annually. As part of the ERM Framework, the Manager undertakes and performs a Risk and Control Self-Assessment (RCSA) annually to identify material risks along with their mitigating measures. The adequacy and effectiveness of the systems of risk management and internal controls are reviewed at least annually, by Management, the ARC and the Board, taking into account the best practices and guidance in the Risk Governance Guidance for Listed Boards issued by the Corporate Governance Council and the Listing Manual. The ClCT Group’s RAS, which incorporates the CICT Group’s risk limits, addresses the management of material risks faced by the CICT Group. Alignment of the CICT Group’s risk profile to the RAS is achieved through various communication and monitoring mechanisms (including key risk indicators set for Management) put in place across the various functions within the Manager. More information on the Manager’s ERM Framework including the material risks identified can be found in the Risk Management section on pages 69 to 74 of this annual report. The internal and external auditors conduct reviews of the adequacy and effectiveness of the material internal controls (including financial, operational, compliance and IT controls) and risk management systems. This includes testing, where practicable, material internal controls in areas managed by external service providers. Any material non-compliance or lapses in
RkJQdWJsaXNoZXIy NTkwNzg=