Risk Management Policy

Effective risk management is essential for MCH Software Solutions Ltd to achieve its business objectives while minimising potential threats and maximising opportunities. This risk management policy outlines the principles, responsibilities, and procedures that guide risk management activities within the organisation.

Objective:

The primary objective of MCH Software Solutions Ltd's Risk Management Policy is to proactively identify, assess, mitigate, and monitor risks that may impact the company's operations, reputation, financial stability, and strategic goals.

Risk Management Framework:

MCH Software Solutions Ltd adopts a systematic and integrated risk management framework, which includes the following key components:

a. Risk Identification: Regularly identify and document potential risks across all areas of the company's operations.

b. Risk Assessment: Evaluate the likelihood and potential impact of identified risks, considering internal and external factors.

c. Risk Treatment: Develop appropriate risk treatment strategies to mitigate, transfer, accept, or avoid risks.

d. Risk Monitoring: Continuously monitor and review risks to ensure their effectiveness and adaptability to changing circumstances.

e. Risk Communication: Maintain open and transparent communication channels to promote a risk-aware culture across the organisation.

f. Risk Reporting: Prepare regular risk reports for senior management and the Board of Directors to provide a comprehensive view of the company's risk profile.

Roles and Responsibilities:

a. Board of Directors: Responsible for overseeing the implementation and effectiveness of the risk management policy and ensuring that it aligns with the company's strategic objectives.

b. Senior Management: Accountable for promoting a risk-aware culture, setting risk management goals, and providing necessary resources for effective risk management.

c. Risk Management Committee: Comprised of designated individuals responsible for coordinating and implementing risk management activities, including risk identification, assessment, treatment, and monitoring.

d. Employees: Expected to actively participate in risk management activities, report potential risks, and comply with established risk management procedures.

Risk Categories:

MCH Software Solutions Ltd categorises risks into operational, financial, strategic, compliance, and reputational risk areas. Each risk category will have specific guidelines and procedures for identification, assessment, and treatment.

Risk Assessment and Treatment:

a. Risk Assessment: Conduct periodic risk assessments to evaluate the likelihood and potential impact of identified risks. Use appropriate methodologies and tools to prioritise risks based on their significance.

b. Risk Treatment: Develop and implement risk treatment plans that align with the company's risk appetite. Treatments may include risk avoidance, risk mitigation, risk transfer, or risk acceptance. Ensure that risk treatments are well-documented, assigned to responsible individuals, and regularly monitored for effectiveness.

Risk Monitoring and Reporting:

a. Risk Monitoring: Continuously monitor identified risks and their treatments to ensure their effectiveness and to identify emerging risks. Regularly update risk assessments and treatment plans as required.

b. Risk Reporting: Prepare periodic risk reports for senior management, the Board of Directors, and relevant stakeholders. Reports should provide clear and concise information on risk profiles, mitigation progress, and emerging risks.

Compliance and Review:

MCH Software Solutions Ltd is committed to complying with relevant laws, regulations, and industry standards. The risk management policy will be reviewed periodically to ensure its alignment with the evolving risk landscape and business objectives.

This Risk Management Policy serves as a guiding document for MCH Software Solutions Ltd to effectively manage risks and promote a risk-aware culture throughout the organisation. It should be communicated, understood, and implemented by all employees to ensure a consistent approach to risk management.

This policy was updated on the April 23rd, 2025