Assignment 1 Semester 2 2025
Unique #:
Due Date: 28 August 2025
Detailed solutions, explanations, workings
and references.
+27 81 278 3372
, CASE STUDY 1: UBUNTU HOLDINGS (PTY) LTD
QUESTION 1
Here are the seven core ERM components Ubuntu Holdings should put in place
(aligned to ISO 31000/COSO and your context):
1. Corporate governance
Board and executive oversight with a clear charter, risk appetite and tolerance,
defined roles (Board, Audit/Risk Committee, CRO, management), and regular risk
reporting and assurance.
2. System of internal control
A strong control environment and control activities across finance, operations, HSE,
legal and compliance, with monitoring and corrective actions to safeguard assets
and shareholder value.
3. Dedicated risk resources
A competent risk function led by the CRO (risk champions in business units, training,
tools and systems) to implement, coordinate and continuously improve ERM.
4. Risk management framework
An organisation-wide framework that embeds risk at strategic, tactical and
operational levels, setting context, roles, escalation paths, reporting lines and
integration with strategy, budgeting and project lifecycles.
5. Risk management policy
A Board-approved policy linking risk to corporate objectives, stating principles,
appetite/tolerance, responsibilities, and minimum standards for identifying,
assessing, treating and reporting risks.
6. Risk management process
A standard process: establish context; identify risks; analyse and evaluate; select
responses (avoid, reduce, transfer, accept, exploit); implement controls/actions;
monitor and review; and communicate and consult—supported by registers, KRIs,
incident/near-miss capture and assurance.
7. Risk sources and responses
Varsity Cube 2025 +27 81 278 3372