IHH Annual Report 2018

ADEQUACY AND EFFECTIVENESS OF THE GROUP’S RISK MANAGEMENT AND INTERNAL CONTROL SYSTEMS IHH’s Management is accountable to the Board for the implementation of the processes involved in identifying, evaluating and managing risk and internal control. In the financial year under review and up to the date of approval of this Statement, the Board has received assurances from the Managing Director and Chief Executive Officer, as well as Chief Financial Officer that the Group’s system of risk management and internal control is operating adequately and effectively, in all material aspects, based on the risk management and internal control system of the Group. Taking into consideration the information and assurances given, the Board is satisfied with the adequacy, integrity and effectiveness of the Group’s system of risk management and internal control. No material losses, contingencies or uncertainties have arisen from any inadequacy or failure of the Group’s system of internal control that would require separate disclosure in the Group’s Annual Report. The measures to protect and enhance shareholder value and business sustainability continue to be a focal point of the Group, and therefore, the system of risk management and internal control across the Group continues to be subject to enhancement, validation and regular review. The Group’s system of risk management and internal controls does not cover associates, joint ventures and its new subsidiary, Fortis Healthcare Limited and its group of companies, which was acquired on 13 November 2018, near to the Group's financial year ended 31 December 2018. REVIEW OF THE STATEMENT BY EXTERNAL AUDITORS The external auditors have reviewed this Statement on Risk Management and Internal Control pursuant to the scope set out in Audit and Assurance Practice Guide ("AAPG") 3, Guidance for Auditors on Engagements to Report on the Statement on Risk Management and Internal Control included in the Annual Report issued by the Malaysian Institute of Accountants (“MIA”), for inclusion in the annual report of the Group for the year ended 31 December 2018, and reported to the Board that nothing has come to their attention that cause them to believe that the statement intended to be included in the annual report of the Group, in all material respects: (a) has not been prepared in accordance with the disclosures required by paragraphs 41 and 42 of the Statement on Risk Management and Internal Control: Guidelines for Directors of Listed Issuers, or (b) is factually inaccurate. AAPG 3 does not require the external auditors to consider whether the Directors’ Statement on Risk Management and Internal Control covers all risks and controls, or to form an opinion on the adequacy and effectiveness of the Group’s risk management and internal control system including the assessment and opinion by the Board of Directors and management thereon. The auditors are also not required to consider whether the processes described to deal with material internal control aspects of any significant problems disclosed in the annual report will, in fact, remedy the problems. IHH Healthcare Berhad | Annual Report 2018 134 Governance STATEMENT ON RISK MANAGEMENT AND INTERNAL CONTROL