Risk Management Statement

1. Approach

We apply a structured, risk-based approach across our engagements — identifying, assessing, treating and monitoring the risks that could affect delivery, compliance, finances, reputation or the interests of the governments and partners we serve.

2. Categories of risk

• Strategic and country risk — political, regulatory and sector conditions affecting national programmes.
• Financial risk — funding, structuring, currency and counterparty exposure.
• Compliance and legal risk — anti-money-laundering, anti-bribery, data protection, employment and contractual obligations under Ugandan law.
• Operational and delivery risk — planning, resourcing and execution of projects.
• Reputational risk — conduct, partners and the integrity of our engagements.

3. Controls and oversight

Risks are recorded, owned and reviewed. The Board of Directors retains overall responsibility for the risk framework, supported by the Business & Legal Team, and integrates risk assessment into project acquisition, due diligence and delivery.

4. Continuous improvement

We review this framework regularly and after significant events, so that it remains proportionate and effective.