Risk management and control

The risk control process

There are five critical elements in our independent risk control process:

– we identify risk, through the continuous monitoring of portfolios, by assessing new businesses and complex or unusual transactions, and by reviewing our own risks in the light of market developments and external events

– we measure quantifiable risks, using methodologies and models which have been independently validated and approved

– we establish risk policies to reflect our risk principles, risk capacity and risk appetite, consistent with evolving business requirements and international best practice

– we have comprehensive risk reporting to stakeholders, and to management at all levels, against the approved risk control framework and, where applicable, limits

– we control risk by monitoring and enforcing compliance with the risk principles, and with policies, limits and regulatory requirements.

Coordinated processes involving all relevant control and logistics functions are applied before commencement of any new business or significant change in business, and before the execution of any transaction which is complex or unusual in its structure or is sensitive to tax, legal, regulatory or accounting considerations. These processes, which involve the business, risk control, legal, compliance, financial control and logistics functions, ensure that all critical elements are addressed in a comprehensive and holistic way, including the assurance that transactions can be booked in a way that will permit appropriate ongoing risk monitoring, reporting and control.