Balancing Risk and Reward

CSR's business activities present a range of risks that cannot be eliminated but can be managed. CSR's policy is to strive to balance the risks and rewards in conducting business to optimise returns – in accordance with our goals of delivering shareholder value, and commitments to customers, employees, the community and other stakeholders with an interest in CSR.

Framework and Commitment

Strategic and commercial risks - a key strategic objective of CSR is the active management of all its capital and resources to enhance long term earnings growth and return on equity. In a large part those returns depend on the effective execution of CSR strategy, which must take into account all relevant strategic and commercial risks.

Operational risks – it is CSR's policy to have a common framework across the company to identify, quantify, manage and monitor business risks. CSR is committed to reinforcing effective business risk management as a key element in its strategic planning, decision making and execution of strategies.

Financial risks – the Board has approved principles and policies to manage financial risks, including exposures to foreign currencies, commodity prices, financing and interest rates. These policies are designed to provide a framework within which the exposures must be managed.

Integrity of accounting and financial reporting – the Board monitors management policies, procedures and controls to ensure the integrity of CSR's financial reporting to stakeholders.

Governance and Compliance with the law – the Board maintains policies and procedures to ensure compliance with all legal requirements in the conduct of CSR's business activities.

Responsibilities

The Board determines the Company's appetite for various risks/opportunities and monitors the Company's operations to ensure the Company is operating within those appetites. The Board is responsible for overseeing the establishment and implementation by management of risk management systems and reviewing the effectiveness of these systems. The Board has assigned responsibility to the following:

• Risk & Audit Committee – reviews and reports to the Board in relation to the Company's financial reporting, internal control structure, risk management systems, compliance with the Company's code of business conduct and ethics and the internal and external audit functions;
• Safety & Sustainability Committee – reviews and reports to the Board on the management of the Company's workplace health safety and sustainability risks and liabilities and associated legal responsibilities;
• Remuneration  and Human Resources Committee – reviews and reports to the Board on the Company's Key Management Personnel risk profile and the adequacy of talent pools for senior management succession;
• Management – responsible for identifying, managing, and reporting to the Board on, risks in accordance with the policy through a formal organisation-wide risk management framework and other formal and informal risk-specific frameworks and approaches and the effective operation of internal control within the group; and
• Risk and Internal Audit – responsible for ensuring CSR's risk management framework reflects best practice and best supports the objectives of the Company, as well as providing assurance to management and the Risk & Audit Committee about the effectiveness of processes to manage internal control and risk in accordance with an agreed annual plan.

Internal Compliance and Control Systems

CSR undertakes an annual review to evaluate the effectiveness of its compliance, control and risk management systems using the ISO:19600 framework as a guide.

External Audit

An independent, external audit is performed on the annual financial report of CSR. In addition, the external auditor undertakes a review of the half year financials of CSR. This provides reasonable assurance as to whether the financial reports are free of material mis-statement and provides an independent opinion whether the financial reports are presented fairly in accordance with accounting standards and other applicable professional reporting requirements.

Measurement and Review of Policy

This policy will be reviewed annually by the CSR Board's Risk & Audit Committee to ensure its effectiveness, continued application and relevance.

Reviewed & Updated: September 2021

Next review date:  June 2022