RISK MANAGEMENT
The Risk Management System of UAPF JSC
The Risk Management System of UAPF JSC (hereinafter - RMS) consists of interconnected elements combined into a single process. Within the framework of the RMS, the management and employees of the Fund, each at their own level, participate in identifying potential risks that may affect the activities of the Fund, as well as in managing these events within an acceptable level of risk. RMS includes a system of processes and procedures that provide the executive body and management body of the Fund with timely information on risks and decisions to minimize them.
The implementation and improvement of RMS is a prerequisite for achieving the strategic and operational goals of the Fund.
The Fund provides for the main areas of risk management.
Operational Risk Management
In its activities, the Fund is exposed to operational risks. Non-financial risks pose serious threats of significant losses and negative damage, including to the reputation of the Fund.
In order to minimize operational risks, the Fund takes measures to optimize business processes by reengineering the Fund's business processes, updating the base of internal regulatory documents and systematizing management reporting flows with the exclusion of duplication.
In the process of managing operational risks, the Fund uses various management tools in its activities:
- Risk event log.. Risk events are recorded in the Risk Events Log (centralized database) and are classified according to the cause and nature of the identified event. The log allows you to identify the most frequent problems and vulnerable areas in business processes, systems, functions of the Fund's divisions and branches, as well as to develop measures to minimize operational risks;
- Risk and internal control matrix. The Fund's divisions independently assess operational risks, which are reflected in the form of a matrix of risks and internal control. This makes it possible to identify and assess realized or potential operational risks, determine the level of their management in the structural divisions of the Fund and assess the effectiveness of subsequent control over the identified risks. Self-assessment results are used to take preventive measures to minimize risks;
- Risk map. The risk map is formed on the basis of the risk management tools used and allows you to highlight risks based on the results of assessing the size of influence and likelihood, types and levels of risks in the dynamics of changes in the movement of risks;
- Key risk indicators. Key risk indicators enable you to proactively identify potential risks and respond to them. The monitoring of indicators of threshold levels of key risk indicators, signaling the likelihood of a risk and clearly reflecting the real danger of risks for the Fund in various areas;
- The process of assessing key and operational risks is carried out as a result of making key decisions, introducing new services, activities, processes and/or systems, strategic goals or in the event of significant changes in existing services, activities, processes and/or systems, strategic goals. It is a procedure for assessing risks, consequences and impact on existing business processes, human resources, financial costs;
- Action plan to minimize risks. The plan is aimed at eliminating the reasons for the realization of risks, as well as minimizing the consequences in the event of the implementation of risk events and identifying potential risks.
To ensure holistic and comprehensive management of operational risks, operational risk management tools are used in an integrated and interconnected manner.
Financial Risk Management
The fiduciary manager of pension assets - the National Bank of the Republic of Kazakhstan ensures the availability of a risk management system for the portfolio of pension assets. However, in order to generate annual financial statements, confirmed by an external audit company and for internal use, the Fund carries out general observations and monitoring of the exposure of portfolios of its own and pension assets to financial risks.
Key Risk Management
All key risks (strategic, operational, financial, legal, and compliance risks and others) that may have a significant impact on the achievement of the Fund's strategic and business goals are collected in the Fund's risk register. Such a Risk Register makes it possible to determine the size of the impact and the likelihood of key risks in all areas of the Fund's activities.
The risk register allows the Fund's management to improve the efficiency of decisions taken, taking into account the current risk profile.
UAPF JSC Business Continuity Management Process
The process of managing the continuity of the Fund creates a framework that guarantees that the interests of the main and interested parties of the UAPF are respected and that the reputation of the Fund is preserved. The process of managing business continuity of the Fund is organized to minimize operational, financial, legal, reputational risks and other financial consequences arising from emergencies / crisis situations and is provided with a reliable infrastructure of information technology and information security, and also provides measures for timely response and restoration of the business continuity cycle as soon as possible.
An example of the effectiveness of the process of managing the continuity of the Fund's activities can be the work of the Fund during the period of the introduction of a state of emergency in the Republic of Kazakhstan in connection with the coronavirus infection (COVID-19) pandemic, which was not stopped for a single day.
Internal Control System of UAPF JSC
The internal control system includes a set of policies, processes and procedures of internal control to ensure the reliability, completeness and timeliness of keeping individual records of pension savings and payments, the safety of assets, information and effective targeted use of the Fund's resources and the reliability of financial, regulatory and management reporting, contributing to compliance with the legislation of the Republic of Kazakhstan. on pension provision and the securities market, as well as the internal rules of the Fund, on reducing the risk of losses or reputational damage.
Improving Risk Culture
Improvement of the risk culture in the Fund is carried out on an ongoing basis. All significant events that may negatively affect the achievement of the Fund's goals are collectively considered at the meetings of the Risk Committee. Upon hiring, all employees are familiarized with the principles of functioning of the corporate risk management and internal control system in the Fund. Professional development and training of all employees of the Fund is carried out continuously, including on issues of risk management. Employees also undergo professional certification in the field of risk management, internal audit, financial analysis in order to maintain the risk management and internal control system of the Fund in accordance with internationally recognized standards and best practices in these areas.
RMS Basic Requirements
Considering that the Fund carries out its activities in accordance with the requirements of the legislation of the Republic of Kazakhstan, the risk management system and the internal control system of the Fund are formed in accordance with the Rules for the formation of a risk management and internal control system for a unified accumulative pension fund and voluntary accumulative pension funds, approved by the Resolution of the Board of the National Bank of the Republic of Kazakhstan dated April 27, 2018 No. 76 (as amended on March 30, 2020).
The main provisions and principles of the risk management system of UAPF JSC are also provided for in the Risk Management Policy of UAPF JSC (with amendments and additions as of April 30, 2021), approved by the Minutes of the Board of Directors No. 3 dated April 28, 2017..
