Risk Management Plicy AGL Energy Limited AUGUST 2014
Table f Cntents 1. Abut this Dcument... 2 2. Plicy Statement... 2 3. Purpse... 2 4. AGL Risk Cntext... 3 5. Scpe... 3 6. Objectives... 3 7. Accuntabilities... 5 8. Risk Management Requirements... 7 9. Related & Supprting Plicies... 7 10. Reviewing and Maintaining The Plicy... 8 11. Glssary f Terms... 8 Date Versin Authr Cmment 06/02/09 1.0 Bec Hunt 02/07/10 2.0 Bec Hunt Revisin t: 05/08/11 3.0 Barb Cle Revisin t: 05/08/11 3.1 Vikki Shizas Minr revisin 24/05/13 4.0 Jasn Clark Minr revisin Integrate ISO 31000 principles and business requirements; Clearly define respnsibilities and utline requirements; Integrate with the Cmpliance Plicy. Further integrate ISO 31000 principles; and Incrprate enhancements based n business feedback and requirements. 20/06/14 5.0 Jasn Clark Minr revisins t accuntabilities. 09/08/14 6.0 Try Menyweather Minr revisin FIRM Updates AGL Risk Management Plicy August 2014 AGL Cnfidential 1
1. Abut this Dcument This Plicy is a frmal representatin f AGL Energy Limited s ( AGL ) cmmitment t Risk Management. It has been apprved by the AGL Bard. This Plicy is als supprted by the AGL Risk Management & Assessment Framewrk which prvides guidance abut the prcesses that underpin effective and cnsistent risk management. 2. Plicy Statement AGL is cmmitted t ensuring that risk management practices are entrenched int all business prcesses and peratins t drive cnsistent, effective and accuntable actin, decisin making and management practice. AGL s fundamental, underlying risk principles are cnsistent with ISO 31000 (Risk Management Principles & Guidelines); and, the COSO standard fr Enterprise Risk Management. 3. Purpse This plicy sets ut the bjectives and accuntabilities fr the management f risk within AGL. The AGL Risk Management Plicy and AGL Risk Management & Assessment Framewrk are tw key dcuments that tgether frmalise and set ut AGL s Risk Framewrk. AGL Risk Management Plicy August 2014 AGL Cnfidential 2
4. AGL Risk Cntext Risk is dynamic and is inherent in all external and internal perating envirnments. AGL is cmmitted t managing all risks effectively. Effective risk management is a means fr achieving cmpetitive advantage and is pivtal t enabling the nging grwth and success f ur business. AGL is a recgnised leader in the Retail and Merchant energy markets. T cntinue t strengthen ur psitin we need t understand the pprtunities and challenges ur business is faced with, nw and int the future. The envirnment in which AGL perates has changed significantly ver the past decade. This in turn has resulted in cnsiderable change t internal peratins, including ur risk prfile. As ur perating envirnment cntinues t be transfrmed, embedding risk management principles and practices int strategy develpment and day t day business prcesses is critical t achieving rbust and practive cmmercial utcmes a balance between mitigating threats and expliting pprtunity; creating and prtecting value. Just as risk is inherent in ur peratins, risk management is als inherent in all decisin making and management prcesses. Risk management is essential t gd crprate gvernance and is a fundamental cmpnent f gd management practice. This plicy sets ut the bjectives and accuntabilities fr the management f risk within AGL such that it is structured, cnsistent and effective. 5. Scpe This Plicy is applicable t all AGL cntrlled businesses. This Plicy applies t AGL, its directrs, and all its emplyees and cntractrs. Thrugh the remainder f this Plicy, AGL s directrs, emplyees and cntractrs are referred t cllectively as emplyees. 6. Objectives Effective risk management within AGL has a number f bjectives: Prmte an enterprise wide apprach by integrating risk management prcesses with:» business strategy; prject management; prcess and decisin making;» audit, insurance and specialist risk functins; and» cmpliance and general gvernance functins. Prmte cnsistency and transparency in methdlgy, assessment and management prcesses. Prmte practive recgnitin f external factrs and anticipatin f uncertainties that may affect the achievement f strategic bjectives. Prmte cnfidence in perating perfrmance, management decisin making and its achievement f expected utcmes. AGL Risk Management Plicy August 2014 AGL Cnfidential 3
Prtect the interests f AGL sharehlders. Prvide assurance t cunterparts, custmers, emplyees and the cmmunity. Spnsr innvatin and maximise value frm assets, ventures and pprtunities. Prvide apprpriate, cnsistent and transparent wnership and accuntability arund risk mitigatin. Enable the design and implementatin f cntrls that:» are structured t prmte effective realisatin f bjectives;» prvide apprpriate assurance; and» are cst effective. Recgnise that timely and accurate mnitring, review, cmmunicatin and reprting f risk is critical t:» prviding mechanisms fr the timely identificatin and effective management f risk ccurrences and cnsequences;» prviding assurance t management, the Bard and sharehlders;» prviding a slid platfrm fr grwth; and» generating and maintaining a sund crprate histry. AGL Risk Management Plicy August 2014 AGL Cnfidential 4
7. Accuntabilities AGL Bard The Bard has ultimate respnsibility fr verseeing the perfrmance f AGL, including mnitring f risk management and internal cntrl systems. T assist it in discharging its respnsibilities the Bard has established the Audit and Risk Management Cmmittee (ARMC). AGL Audit and Risk Management Cmmittee In accrdance with its Charter, the ARMC is respnsible fr maintaining and verseeing a sund system f internal cntrls based n the adptin by the Bard f a risk-based apprach t the identificatin, assessment, mnitring and management f risks that are significant t the fulfilment f AGL s business bjectives. Mre specifically, the ARMC is required t: Recmmend t the Bard fr apprval AGL s risk management plicy and framewrk fr identifying, assessing, mnitring and managing risk; Regularly review AGL s risk prfile; Review all material risks alng with the peratin f mitigating cntrls. Review and mnitr the effectiveness f the risk management framewrk and the system f internal cntrl. As part f mnitring and assessing the effectiveness f the system f internal cntrl, regularly receive and review reprts n internal cntrl; Review at least annually, AGL s implementatin f the risk management plicy and framewrk; Review the risks assciated with business cntinuity planning; and Review the adequacy f AGL s insurance plicies, including the terms f annual plicy renewals and the creditwrthiness and claims payment histries f AGL s principal insurers. Grup Audit Grup Audit is an independent appraisal functin established t prvide assurance t the Bard, the ARMC and the Executive Team abut the adequacy and effectiveness f existing internal cntrls. Mre specifically, Grup Audit is respnsible fr: Develping and implementing an annual audit plan having regard t AGL s material risks; Reviewing the effectiveness f AGL s risk management plicy and risk management prcesses; and Ntifying Grup Risk f new and emerging risks identified in the curse f implementing the audit plan and, where necessary, mdifying the audit plan t take accunt f the impact f new risks. AGL Risk Management Plicy August 2014 AGL Cnfidential 5
Grup Risk & Cmpliance Grup Risk & Cmpliance is respnsible fr: Identificatin and reprting f AGL Tier 1 Risks; Prmting and facilitating a standardised apprach t effective risk and cmpliance management; Assisting the business t understand and manage risk and cmpliance and facilitating the integratin f AGL s apprved prcesses fr managing risk and cmpliance within the business; Reprting t the ARMC n less frequently than quarterly n risk and cmpliance issues; Reprting t the Executive Team regularly n material risks and issues; Supprting the business in identifying and implementing risk and cmpliance management imprvement prcesses; Keeping abreast f factrs in the internal and external envirnments that may affect the achievement by AGL f its strategic bjectives and/r perating targets; Maintaining and reviewing the AGL Risk Management and Cmpliance Framewrks (including relevant plicies and prcesses). Management All Management is respnsible fr: Prmting AGL s Risk Plicy, Framewrk and expectatins fr the management f risk; Prvisin and supprt f apprpriate resurces t manage risk in accrdance with the Plicy & Framewrk; Escalating risks, issues and pprtunities in accrdance with the Risk Management & Assessment Framewrk; The design and implementatin f cst effective risk management and internal cntrl systems in accrdance with the guidelines t manage risk, encurage efficiencies and take advantage f pprtunities; Cntinuus mnitring and reprting f the effectiveness f risk cntrls; Mnitring cmpliance, investigating breaches, recmmending and/r apprving imprvement pprtunities. Emplyees It is the respnsibility f all AGL emplyees and cntractrs t: Reprt t their immediate leader r supervisr, any real r perceived risks that becme apparent and may significantly affect AGL s: Cmmercial viability; Prfitability; Assets; Business cntinuity; Custmers; AGL Risk Management Plicy August 2014 AGL Cnfidential 6
Regulatry and/r legal bligatins; Reputatin; and/r Peple and/ r their safety. Reprt t their immediate leader r supervisr, any real r perceived risks that AGL s peratins may significantly affect the brader: Envirnment; and/r Cmmunity. Lk fr pprtunities t imprve peratinal efficiencies and ptimise utcmes. 8. Risk Management Requirements Each area f the business is accuntable fr managing risks and must maintain a register f material risk expsures; Risk registers will be based n the utcmes f thrugh risk identificatin and assessment prcesses in accrdance with the AGL Risk Management & Assessment Framewrk; Review f risk registers are t be cnducted regularly (dependent n business requirements) and reprting and escalatins shuld ccur in accrdance with the AGL Risk Management & Assessment Framewrk; Enterprise risk identificatin, assessment and prfiling will be cnducted at least nce per year. 9. Related & Supprting Plicies This Risk Management Plicy is supprted by, and linked t, specific AGL plicies and standards as issued frm time t time. These plicies and standards include, but are nt limited t: AGL Risk Management & Assessment Framewrk Crprate Cde f Cnduct Cmpliance Plicy and Prgram Whlesale Energy Risk Management Plicy Whlesale Energy Risk Management Framewrk Health, Safety & Envirnment Plicy Accunting Plicies and Prcedures Treasury Plicy Equal Emplyment Opprtunity Plicy Lifeguard AGL Risk Management Plicy August 2014 AGL Cnfidential 7
10. Reviewing and Maintaining The Plicy This Plicy is administered by Grup Risk & Cmpliance. The Plicy is t be reviewed every tw years. Changes t the Plicy require Bard apprval. 11. Glssary f Terms Descriptr ARMC Cmpliance Functin Risk Risk Appetite Risk Management Risk Management Plicy Definitin Audit and Risk Management Cmmittee The specialist functin respnsible fr establishing, maintaining and administering a cmpliance prgram fr the relevant cmpliance requirement (i.e. Energy Regulatin; Lifeguard; Whlesale Energy Risk Management) The effect f uncertainty n bjectives The apprach t assess and eventually pursue, retain, take r turn away frm risk Crdinated activities t direct and cntrl an rganisatin with regard t risk A statement f the verall intentins and directin f an rganisatin related t risk management AGL Risk Management Plicy August 2014 AGL Cnfidential 8