Risk Management

Group Strategic Approach

The Board is ultimately responsible for governance of risk management across the Group. The Board achieves this through the Audit & Risk, Finance & Investment, and the Executive Committees along with independent divisional or subsidiary Boards.

The responsibilities of each of the committees are provided on the Corporate Governance page. Our approach to risk management is structured on Enterprise Risk, Finance and Internal Controls Risk, Climate Risk as well as external risks to the economy, society and environment.

Enterprise Risk Management

Management of Enterprise Risk is based on effective leadership provided by the Board through the Executive, Audit and Risk, Finance and Investment Committees as well as the Sustainability Working Panel. The Board reviews all material business and financial risks to provide sound decisions and targets for implementation. This ensures that all forms of risks are identified, evaluated and monitored, with systems and processes adapted accordingly to minimise and manage risks.

The Group uses the following instruments and approaches to risk management:

  • Legal and regulatory framework including industry standards and best practices.
  • Robust policy framework including policies and procedures on business standards, code of
    conduct, ethics, human rights, human resources, occupational health and safety, sustainability, environment, supply and procurement, and corporate social responsibility.
  • Safety, Health, Environment and Quality (SHEQ) policies.
  • Alignment with IFRS S1: General Requirements for Disclosure of Sustainability-related Financial Information and S2: Climate-related Disclosures on climate-related risks and opportunities.
  • Alignment with Global Reporting Standards (GRI: 2021) on disclosure and sustainability reporting.
  • Maintaining certifications with the International Management System Standards (MSS) as presented in the table below. The Group continues to work with businesses to attain further certification and standards where appropriate, striving for best practice.
  • Supplier and/or customer compliance audits.
  • Providing regular employee training and awareness raising on the various aspects of risk management.
  • Providing effective leadership to ensure all forms of risks are identified, evaluated and monitored, and systems and processes are adapted accordingly to minimise any risks.


Accreditation to the following Standards play an important part in the Group’s Risk Management and monitoring processes.

The Group’s Standards & Certifications

International Management Systems

  • ISO 9001 Quality Management System
  • ISO 14001 Environmental Management System
  • ISO 22000 Food Safety Management System
  • ISO 17025 Management System for general requirements for the competence of testing and calibration laboratories
  • FSSC 22000 Food Safety Management System, recognised by the GFSI (Global Food Safety Initiative)
  • ISO 45001 Occupational Health & Safety

Global Standards

  • BRCGS (Brand Reputation through Compliance) – Packaging – Natpak
  • SMETA (Sedex Members Ethical Trade Audit) – Natpak
  • SGP (Supplier Guiding Principles) – Natpak

Health Standards

  • International Labour Standards on Occupational Safety and Health – ILO-OSH
  • Health Professions Authority of Zimbabwe (HPA)
  • Ministry of Health Certification
  • National Social Security Authority (NSSA) Factory Licence
  • Food Safety Advisory Board standards
  • City of Harare – City Health Licence
  • Ruwa Local Board – Health Registration Certificate
  • Municipal and Council Health Departments standards

Agriculture

  • Agricultural Marketing Authority (AMA)
  • Ministry of Agriculture Certification
  • Environmental Management Agency (EMA) Licences

Other

  • KOSHER (Jewish Dietary framework for food preparation processing and consumption)
  • HALAAL (National Halaal Association of Zimbabwe (NHAZ)

Financial and Internal Control Risk

The Audit & Risk Committee plays a critical role in assisting the Board with managing internal control risk within the Group as is fully explained on the Corporate Governance page.

Regulatory Compliance

We place high value on being legally compliant with national and international standards applicable to our operations. The Group adheres among other legislation to the following specific national legislation:

  • Companies and Other Business Entities Act [24:31]
  • Cyber and Data Protection Act [Chapter 12:07]
  • Competition Act [Chapter 14:28]
  • Public Health Act [Chapter 15:17]
  • Consumer Protection Act [Chapter 14:44]
  • Labour Act [Chapter 28:01]
  • Factories and Workers Act [Chapter 14:08]
  • National Social Security Authority Act Chapter 17: 04
  • Environmental Management Act [Chapter 20:27]
  • Fertilizers, Farm Feeds and Remedies Act [Chapter 18:12]
  • National Social Security Authority (Accident Prevention and Workers Compensation Scheme) (Prescribed Matters) Notice, 1990, Statutory Instrument No. 68 of 1990
  • Environmental Management (Effluent & Solid Waste Disposal) Regulations, 2007, Statutory Instrument No. 6 of 2007
  • Environmental Management (Hazardous Waste Management) Regulations, 2007, Statutory Instrument No. 10 of 2007
  • Environment Management Act (Atmospheric Pollution Control) Regulations, 2009, Statutory Instrument No. 72 of 2009

Cybersecurity and Data Protection

Adequate cybersecurity management requires a strategic approach that involves implementing appropriate security controls, and preventing, detecting, and responding to cyber incidents as they occur. Cybersecurity and data protection management is a continuous process that adapts to evolving potential threats and risks. Cyberattacks often result in substantial financial losses and potential consumer mistrust. The Group is currently aligning its data management systems to ensure that it fully complies with the Cyber and Data Protection Act [Chapter 12:07].

Anti-corruption

The Group takes a comprehensive approach to anticorruption management and recognises the impact that corruption poses to its financial stability, stakeholder trust, reputation, and ethical standing. The Group conducts periodic risk assessments across operations and subsidiaries to identify areas of exposure. Robust procedures are in place to prevent, detect, and report corruption, within all of the Group’s operations and subsidiaries, supported by regular employee training and awareness raising. The Group is committed to maintaining the highest standards of integrity and ethical conduct and have developed procedures for effective reporting and investigation of any cases of misconduct. Investigations are conducted in a fair, non-prejudicial manner irrespective of the suspect’s length of service, position and/or relationship to the Group. The Group’s anti-corruption culture encourages employees to timeously report all allegations or incidents of fraud, theft and corruption through secure channels, with all confirmed cases subject to disciplinary action or referral for criminal investigation to police authorities.

Whistle-blower system

The Group subscribes to the whistle-blower system independently managed under the Axcentium Ethics Line Tip-Offs Anonymous service. This system utilises hotlines and email channels for employees and stakeholders to report breaches or any form of crime or unethical behaviour within the Group. Confidentiality is maintained throughout the process, providing reporters with the assurance of reporting fraudulent activities without fear of victimisation. The reported allegations are investigated to substantiate breaches to the Group’s codes of ethics and conduct, with subsequent disciplinary action taken accordingly.

The Group is guided by our Code of Conduct and policies on Business Standards, Sustainability, Environmental, and Supply and Procurement. Oversight is through the Audit Committee and Board.

Environmental Risk

Environmental responsibility is an important aspect of the Group’s operating practices. The Group gives emphasis to the importance of managing environmental risk by insisting on its businesses to be environmentally compliant and setting robust policies, goals and targets. The Group continues to identify, assess and manage significant impacts to the environment across its operations. The Group aim to avoid, minimise, mitigate, monitor and manage environmental risks from its activities by complying with regulatory requirements, adhering to responsible practices and undertaking regular environmental and occupational health and safety inspections.

Biodiversity-related Risk

As part of the Group’s overall commitment to addressing environmental risks, we recognise the importance of addressing the biodiversity and nature-related impacts resulting from our operations. During the reporting period, we continued to identify, assess and manage significant impacts to biodiversity across our sites.

The Group prioritise biodiversity by focussing on reducing threats to biodiversity, and implementing measures to halt and reverse biodiversity loss, as part of promoting sustainable practices in our business strategy and operations. Guidance on biodiversity-related risk management is included in the Group’s Environmental and Sustainability Policies.

Climate-related Risk

Another aspect of environmental risk is the impact of climate change on the Group’s operations. The Group continues to recognise the need to review climate risk exposure and to develop appropriate strategies to ensure resilience throughout its operations and within its sphere of influence.

As climate change can result in a wide range of risks and impacts that disrupt operations and productivity, the Group’s businesses continue to focus on identifying and managing their climate-related risks and opportunities and report accordingly. The Group continues to implement a variety of strategies to manage the challenges posed by climate change and to adapt to the changing conditions, ensuring long-term sustainability and productivity. The Group is also committed to implementing appropriate climate-related innovations and opportunities thereby enhancing sustainable development practices.

The Group’s climate-risk assessment and management approach is guided by the United Nations Framework Convention on Climate Change (UNFCCC) along with national frameworks such as the National Climate Policy, Climate Response Strategy, and the upcoming Climate Change Management Bill. The Group is also working towards aligning with IFRS S2: Climate-related Disclosures and the relevant GRI standards. Internally, climate change management is included in the Group’s Environmental and Sustainability Policies.

The Group is guided by our Code of Conduct and policies on Business Standards, Ethics, and Supply and Procurement. Oversight is through the Audit & Risk, Finance & Investment, and the Executive Committees along with independent divisional or subsidiary Boards.