AL-SALAM REIT ANNUAL REPORT 2024

Responsibilities • Oversees the operationalisation of risk management strategies as well as frameworks and policies. • Independent reporting to the management and BARC. • Advisor to Business Line Management/ Risk Owners. Process Monitors the consistent enforcement of ERM policy, reviews and endorses risk parameters, risk appetite, risk profile, and treatment options and risk action plans. Responsibilities • The senior management is primarily responsible for managing process, • They are also responsible for controlling risks by using business control and compliance frameworks, implementing internal control processes, and adequate control. • Manage day-to-day risk inherent in business activities as guided by the established risk strategies, frameworks, and policies. Process Identification and assessment of risk, implementation, and monitoring of risk action plans. THE GOVERNANCE STRUCTURE (CONT’D) The governance structure dictates the segregation of the roles and responsibilities of the Board, BARC, the ERMC and other key personnel which are summarised as below (Cont’d): The Board and the Board Committees also carries out an annual assessment of risk management and internal control on all significant aspects of risks and internal control of the REIT in its Strategic Planning report, particularly on: • The nature and extent of significant risks, in the current and upcoming years; • The company’s ability to respond to changes in its business and the external environment; • The work of its internal audit and risk management (where applicable) units and other assurance providers; • The incidence of significant control failings or weaknesses that were identified at any time and their impact on the company’s performance or condition (financial or otherwise); • Any events that impacted the achievement of objectives that were not anticipated by management; and • The adequacy and effectiveness of the risk management and internal control policies as a whole. RISK MANAGEMENT Board Audit and Risk Committee (BARC) The BARC is a delegated committee of the Board of Directors tasked with providing oversight and strategic direction on the organization’s risk management practices. It ensures that key risks are properly identified, managed, and aligned with the organization’s objectives, risk appetite, and regulatory obligations. The board as a whole, is committed and responsible for the execution of the delegated role of the BARC primarily related to the outcome of the review and disclosure of key risks and internal control. Statement on Risk Management and Internal Control ERMC Business Line Management/ Risk Owners 1 ABOUT US 135 3 SUSTAINABILITY STATEMENT 4 CORPORATE GOVERNANCE 5 OTHER INFORMATION 6 FINANCIAL STATEMENTS 2 BUSINESS OVERVIEW

RkJQdWJsaXNoZXIy NDgzMzc=