IHH Annual Report 2023

Statement on Risk Management and Internal Control Governance Adequacy and Effectiveness of the Group’s Risk Management and Internal Control Systems IHH’s Management is accountable to the Board for the implementation of the processes involved in identifying, evaluating and managing risk and internal control. In the financial year under review and up to the date of approval of this Statement, the Board has received assurances from the Group CEO, as well as the Group Head of Treasury, that the Group’s system of operating is adequate and effective in all material aspects, based on the risk management and internal control system of the Group. Taking into consideration the information and assurances given, the Board is satisfied with the adequacy, integrity and effectiveness of the Group’s system of risk management and internal control. For the financial year under review, there were no material control failures or adverse consequences that have directly resulted in any material losses to the Group. The measures to protect and enhance shareholders’ value and business sustainability continue to be a focal point of the Group and, therefore, the system of risk management and internal control across the Group continues to be subject to enhancement, validation and regular review. The Group’s system of risk management and internal controls does not cover associates and joint ventures. Review of the Statement by External Auditors The external auditors have reviewed this Statement on Risk Management and Internal Control pursuant to the scope set out in Audit and Assurance Practice Guide (AAPG) 3, Guidance for Auditors on Engagements to Report on the Statement on Risk Management and Internal Control included in the Annual Report issued by the Malaysian Institute of Accountants (MIA), for inclusion in the annual report of the Group for the year ended 31 December 2023, and reported to the Board that nothing has come to their attention that causes them to believe that the statement intended to be included in the annual report of the Group, in all material respects: (a) has not been prepared in accordance with the disclosures required by paragraphs 41 and 42 of the Statement on Risk Management and Internal Control: Guidelines for Directors of Listed Issuers, or (b) is factually inaccurate. AAPG 3 does not require the external auditors to consider whether the Directors’ Statement on Risk Management and Internal Control covers all risks and controls, or to form an opinion on the adequacy and effectiveness of the Group’s risk management and internal control system, including the assessment and opinion by the Board of Directors and management thereon. The auditors are also not required to consider whether the processes described to deal with material internal control aspects of any significant problems disclosed in the annual report will, in fact, remedy the problem. IHH Healthcare Berhad 118

RkJQdWJsaXNoZXIy NDgzMzc=