Introduction
The Clicks Group is committed to applying risk management
principles which effectively manage uncertainty and the related risks
and opportunities in order to enhance returns to investors.
The group follows the risk management principles outlined in the King ll Report. A new enterprise-wide risk management methodology was developed, approved and adopted during the year, with detailed risk registers being compiled for the group and individual business units based on this new process.
The directors confirm that risk mitigation and monitoring processes have proved to be robust and have been effective in limiting the impact of risks on the business in the 2009 financial year.
The recommendations of King lll are currently being reviewed by management and group practices will be amended where appropriate to align with these new requirements.
The board retains overall accountability for risk management and the directors have delegated specific responsibility to the risk committee.
The risk committee, which operates within written terms of reference, is responsible for assessing risk management processes and procedures adopted by management and ensuring compliance with the risk management principles of King ll. The role, functions and composition of the risk committee are included in the Corporate Governance Report.
The audit committee is responsible for monitoring and assessing the role and effectiveness of the internal audit function in the overall context of the group’s risk management system, ensuring the work undertaken by the internal audit department is aligned with the group’s risk priorities.
The group executive committee is responsible for designing and implementing the risk management process and monitoring ongoing progress. The executive regularly reviews the group’s risks to ensure mitigation strategies are being implemented by the business units. Senior executives and line management within each business unit are accountable for managing risk in achieving their financial and operating objectives.
Group internal audit monitors the progress of the group and business units in managing risks and reports its findings to the audit committee on a quarterly basis.
Risk management is embedded in the group’s annual business planning cycle. In determining the strategic and operational plans for the year ahead, each business unit is required to compile a risk register. This includes a review of the risks of the previous financial year, considering new or emerging risks, facilitated workshops with all levels of management and, where appropriate, presentations by external consultants on the environment and market conditions.
A risk framework sets out the various risks that should be considered as part of the risk identification process. The risks are broadly classified according to the following categories: strategic, environmental, financial, reputational, regulatory, people, economic, process and competition. These potential risks are updated annually to ensure all relevant industry issues are considered.
Each risk on the register is assigned an impact and probability rating:
The impact and probability ratings are then multiplied to determine the inherent (gross) risk and its significance to the group.
Detailed risk mitigation plans are developed for each risk which then determine the level of residual (net) risk. Residual risk ratings are then assigned to each risk.
The major risks, together with mitigation strategies, are outlined in the adjacent table.
As the new risk methodology was introduced this year it is not possible to compare the current major risks with those published in the 2008 annual report, although the directors do not believe there has been any material change in the overall risk profile of the group over the past year.
A comprehensive financial risk management programme focuses on the unpredictability of financial markets and seeks to minimise the potential adverse effects on the group’s financial performance. Management recognises that the failure to manage financial risks could impact negatively on profitability and ultimately lead to the destruction of shareholder value.
Through its business activities the group is exposed to a variety of financial risks, including market risk (currency, interest rate and price risk), credit risk and liquidity risk. The group’s exposure to these risks and policies for measuring and managing the risk are included in notes 28 and 29 to the annual financial statements.
The group’s treasury function provides a centralised service for funding, foreign exchange, interest rate management and counterparty risk management. The treasury function reports to the chief financial officer and group financial manager and operates within the parameters of the group’s treasury policy. The treasury committee, which comprises the heads of finance of the business units together with the chief financial officer and group financial manager, meets with the group treasurer on a quarterly basis. The treasury committee reviews the performance of the treasury function against agreed benchmarks, adopts procedures to minimise financial risk and ensures the accurate cash flow forecasting of the group.
Derivative financial instruments are used to hedge certain risk exposures, including the phantom share scheme, the long-term incentive scheme and foreign exchange risk on the import of merchandise. Foreign exchange risk is mitigated by entering into forward exchange contracts which are matched with anticipated future cash flows in foreign currencies. Details of the group’s foreign exchange exposure is contained in note 29.
Insurance forms a key element of the risk management process to protect the group against the adverse consequences of risk. The group recognises that although insurance is a means of mitigating the impact of certain identified risks, management has responsibility to manage these risks with the purpose of limiting their occurrence and their impact.
The risk committee approves the annual insurance renewal, cover levels and the schedule of uninsured and uninsurable risks. It is the policy of the group to insure assets to replacement value, carry appropriate levels of self-insurance and only contract with reputable insurance companies. The group self-insures assets and liabilities based on recommendations from its advisers. Amounts in excess of the self-insured limits are covered by reinsurers.
| RISK | IMPLICATION FOR BUSINESS | RISK MITIGATION PLANS | RISK RATING* | ||
|---|---|---|---|---|---|
| Current economic climate | Downturn in economy is impacting on discretionary spending which could affect sales and margin of retail brands and also increase bad debts in UPD |
|
28 | ||
| Attraction and retention of pharmacy professionals | The group employs pharmacists in Clicks, UPD and Clicks Direct Medicines and is the largest employer of pharmacists in the private sector. Shortage of healthcare professionals is an industry challenge and could limit growth plans and increase costs. |
|
28 | ||
| Healthcare legislation | Lack of clarity on the implementation of maximum logistics fees and changes in pharmacy legislation creates uncertainty with investors |
|
27 | ||
| Process non-compliance | Non-compliance with policies, procedures and processes could impact on sales, shrinkage and cash losses |
|
24 | ||
| Increasing competition in retail pharmacy | Aggressive expansion by competitors could increase the shortage of pharmacists as well as negatively affect sales and market share growth in Clicks |
|
24 | ||
| Retention of key staff | Inability to attract and retain people in key positions across the group could ultimately compromise service delivery |
|
24 | ||
| Legislative and regulatory compliance | Non-compliance with onerous legislation could result in fines and penalties, criminal implications for directors and reputational damage |
|
21 | ||
| Service disruption due to natural disaster | Natural disasters could result in stock being destroyed or deliveries disrupted and lead to loss in sales through an inability to trade |
|
21 | ||
|
|||||