Vodacom Integrated Report 2016

67 / 98

Shareholder relations
Vodacom proactively communicates its strategy and activities to
shareholders through a planned investor relations programme
which includes:
À À formal presentations of annual and interim results;
À À briefing meetings with major institutional shareholders after the
release of results; and
À À hosting investor and analyst sessions.
Risk management
Management continuously develops and enhances its risk and
control procedures to improve risk identification, assessment and
monitoring. The Board considers business risks when setting
strategies, approving budgets and monitoring progress against
budgets.
A division reporting to the Chief Risk Officer assists in identifying,
assessing and recording the strategic risks facing the Group and,
where appropriate, monitors mitigating actions.
Page 20
More detail on the major strategic risks identified in the year.
Internal control
Management implements internal controls, which comprise of
policies, procedures and processes, to provide reasonable
assurance on safeguarding assets, preventing and detecting errors,
the accuracy and completeness of accounting records, and the
reliability of financial statements. Internal audit provides
independent, objective assurance of the system of internal
controls within the Group.
Stakeholder engagement
The Board has delegated to management the responsibility to deal
with stakeholder relationships in a proactive and constructive
manner. There is an approved stakeholder policy in place.
The initiatives and activities for the year are
more fully reported in the sustainability
report at vodacom
Technology governance
In line with King III, technology governance forms part of our
governance structures, policies and procedures. It forms part of the
Group’s strategic and business processes and is managed by the
Chief Technology Officer.
The Vodacom Technology Governance Framework and charter,
which are mapped to the IT governance principles of King III, have
continued to be reinforced in the organisation. Each framework
element is substantiated through demonstrable processes to align
technology strategy and business needs, deliver value and manage
performance, and to strengthen information security management,
information management, risk management, business continuity
management and compliance.
Our attention in the past year has focused on putting mechanisms
in place to ensure independent assurance of services provided by
outsourced providers, and moving towards compliance of the
Protection of Personal Information (PoPI) Act.
Our performance Our business Governance review Administration Overview
63