ENRA Group Berhad Annual Report 2018

39 A N N U A L R E P O R T 2 0 1 8 STATEMENT ON RISK MANAGEMENT AND INTERNAL CONTROL cont’d RISK MANAGEMENT FRAMEWORK (Cont’d) Management of Significant Risks (Cont’d) Risk Management based on ISO 31000 (2008) RISK MANAGEMENT STRUCTURE Board of Directors Audit & Risk Management Committee Executive Risk Management Committee Day-to-day risk management (1 st Line of Defense) Internal Audit (3 rd Line of Defense) Risk oversight (2 nd line of defense) RMU RMU RMU RMU