Internal control system

In order to fulfill the Company's responsibility to perform its governance responsibilities and provide reliable financial and operational information, the Company maintains internal control and risk management systems. Controls are designed to address financial, operational, compliance and sustainability issues and provide reasonable assurance that transactions are authorised and properly handled and recorded; Assets are adequately protected against significant loss and unauthorized acquisition, use or disposal; Policies and procedures are implemented.

These systems include a documented organizational structure and division of responsibilities, clear accountability, established policies and procedures throughout the Group, including the careful selection, training and development of talent. The Company does not have an independent internal audit function.

The Company monitors the operation of the internal control system to determine whether deficiencies exist and takes corrective action to address control deficiencies when deficiencies are identified. The Board is responsible for reviewing the effectiveness of the internal control and risk management systems through the Audit and Risk Committee.

Any internal control system has inherent limitations in effectiveness, including the possibility of human error, circumvention or overreach. Therefore, an effective internal control system can only provide reasonable assurance.