AL-SALAM REIT ANNUAL REPORT 2023

136 AL-SALĀM REIT ANNUAL REPORT 2023 Risk Management and Internal Control (a) Reviewed quarterly top risk profiles which covers Strategic, Finance, Operational and Compliance Risks and ESG related risks especially with with respect to environmental risks,deliberated on the significant threats and opportunities, including status and adequacy of mitigation strategies. (b) Discussed the improvements to the Enterprise Risk Management framework and process to ensure proactive and holistic risk identification, and monitoring of mitigation actions to reduce risk impact to an acceptable level. (c) Evaluated the overall adequacy and effectiveness of internal controls through review of the work performed by both internal and external auditors, other assurance providers and through discussions with Management. (d) Ensures appropriate controls are in place in management of the Fund, that the Manager has a well-defined organisational structure with clear lines of responsibility and a comprehensive reporting system and adequate procedures in financial reporting, risk management, internal control and are in place. Further details in respect of risk management and internal controls are set out on pages 149-161 (SORMIC of this Annual Report). Details in respect of the principal risks and uncertainties are set out on pages 4344 under Management Discussion and Analysis. (e) Reviewed and deliberated on four frameworks relating to compliance and internal controls and recommended to the Board the implementation of the frameworks and policies put forward by the Management. No Frameworks & Policy Date of Meeting Reason for Revi Compliance (a) Monitored and reviewed the status and outcomes of the Quarterly Compliance Report which seek to identify gaps in compliance with regard to applicable laws, regulations, codes, standards, policies and procedures and discussed the adequacy of measures to address such gaps or non-compliance. (b) Deliberated on the results of compliance cases and directed Management to implement and/or enhance controls to prevent a recurrence, including conducting education programmes to increase awareness. (c) Received updates on the directorships and shareholdings held by the Directors of the Company and persons connected with them in accordance with Section 221 of the Companies Act, 2016 on a annual basis. These disclosures enabled an assessment of the potential or actual conflicts of interest which may arise in relation to Related Party Transaction (“RPT”) or Recurrent Related Party Transaction (“RRPT”). (d) Monitored the status of internal misconduct cases reported to Board and BARC on a quarterly basis, including on-going investigations, in accordance with the Code of Conduct and Business Ethics (“CoBE”). (e) Ensured that the Declaration of Directors' Interests in Securities and disclosures of conflict-of-interest situation(s) in all Board level meetings, are documented and minuted accordingly in the minutes of meeting. The Committee took note that there was no management conflict of interest situations for operational matters (including any transaction, procedure, or course of conduct) as reported by the Chief Executive Officer. BOARD AUDIT AND RISK COMMITTEE REPORT

RkJQdWJsaXNoZXIy NDgzMzc=