2025 Corporate Report

Transurban Corporate Report FY25 Governance and risk

Risk management We are committed to building a risk-aware culture, supported by a tailored, practical, and integrated approach to identifying and managing uncertainty in our strategy, operations, and the global environment. An organisation-wide, integrated and proactive risk approach is essential for our resilience, sustainability, and to create value and growth. By anticipating and understanding current and future uncertainties, we can mitigate threats and seize opportunities that benefit all our stakeholders. Our Enterprise Risk Management (ERM) Framework sets out the principles that govern our approach to managing risk, and provides guidance on the proactive identification of risks (both threats and opportunities) for all our business endeavours. The framework supports informed strategic decision making, operational efficiency, financial stability, regulatory compliance and organisational resilience, while also identifying opportunities for growth and innovation. The ERM Framework is integrated with related organisational processes and policies to ensure a business-wide consideration of our risks and to enable us to understand and address their potential consequences. Example policies include our: Code of Conduct; Anti Bribery, Corruption and Fraud Policy; Conflicts Management Policy; Compliance Framework and our Sustainability Strategy. The framework is also integrated into business activities and procedures including: health, safety and environment; internal audit; tax; treasury; procurement; business resilience; and insurance. Overseen by our Board and Audit and Risk Committee (ARC), and managed by our CEO, Executive Committee and senior management, the framework provides a comprehensive approach to ensuring key risks are promptly identified, evaluated, and communicated. This enables us to effectively escalate and respond to risks which may materially impact our business, customers or stakeholders.

Figure 31 – Transurban ERM process

1. Risk appetite Confirm the boundaries and understand our performance

2. Plan Set the context

3. Identify What are the risks?

Horizon scanning

Knowledge sharing

4. Assess Analyse and evaluate

5. Manage Address the risks

8. Audit and assurance Test and confirm

Risk appetite Our Risk Appetite Statement, which is linked to our organisational strategy, outlines the level of risk we are willing to accept, tolerate or avoid in the pursuit of our strategic objectives. This provides a balanced approach to growth, with risk management aligned with our overall purpose, values and stakeholder expectations. The Risk Appetite Statement is critical in guiding our decision- making attitudes and behaviours – both in navigating times of uncertainty and also allows us to capitalise on opportunities. To confirm we are operating within our risk appetite thresholds, we have linked our Risk Appetite Statement with our Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs). Our KRIs and KPIs help us measure our risk management and current business performance against financial and non-financial risk metrics. We track our performance against our risk appetite and this is presented to the Board to provide early insights into our risk exposures and to enable informed decision making. Across the business, and at all levels of management, our teams regularly review our business activities in conjunction with both local and global operating environments to identify risks that have potential to impact or disrupt Transurban or our stakeholders. Strategies to eliminate or mitigate these exposures, as well as contingency plans should a threat occur, are developed and implemented to manage any negative outcomes.

Emerging threats and opportunities

Emerging risks (threats or opportunities) are new or evolving disruptions that have the potential to materially impact upon our business. We seek to manage these risks by performing continuous horizon scanning, analysing business metrics and monitoring for emerging themes. Scenario planning and exercises are then undertaken to aid the identification of adaptive strategies to aid in the timely identification and management of emerging risks. Transurban’s strategy is also underpinned by strategic business decisions that may create or impact threats and opportunities for our business. This means risk management is also crucial in identifying these positive risk opportunities that can be leveraged to enhance business performance and achieve strategic objectives. Through these risk assessments, scenario analysis and strategic planning we can identify and test the opportunities in our existing markets and potential growth opportunities, to maximise return and improve certainty of outcome.

68

Made with FlippingBook Digital Publishing Software