principles underlying risk MANAGEMENT
USG People is exposed to risks in the performance of its business activities. Our success as an organisation is partly dependent on our ability to cash in on opportunities and to manage risks. This means that risk management, as well as taking advantage of opportunities, is an integral part of the day-to-day conduct of business at all management levels.
USG People’s policy is to safeguard the continuity of its business activities whilst maintaining a healthy balance between risks and returns. Internal risk management systems can help to achieve this balance. A properly functioning risk management system allows both opportunities and threats to be identified at an early stage, enabling us to take advantage of opportunities whilst limiting the associated risks. Responsibility for setting up internal risk management systems and for guaranteeing and monitoring their operation and effectiveness lies with the Executive Board and the management of USG People.
INTERNAL RISK MANAGEMENT AND CONTROL SYSTEM
The internal risk management and control systems at USG People are focused on identifying events which could have an impact on realising our objectives. In addition the purpose of these systems is to control the risks identified within our risk appetite.
These systems allow us to achieve our objectives without losing sight of the associated risks. In other words: errors are identified and corrected, and maximum precaution is taken to ensure that unexpected situations do not lead to surprises. It goes without saying that completeness cannot be guaranteed for such systems and that no internal control system is able to provide absolute certainty. The internal risk and control systems at USG People, which consist of a combination of instruments based on the COSO ERM model, are shown in the following diagram.

The various elements of the risk management and control systems are explained in more detail below.
Control frameworks
The criteria for our functioning are set out in documents such as our Code of Conduct, Business Principles, the Model Code and the Corporate Delegation of Authorities Scheme. In addition to these internal guidelines it goes without saying that the framework for USG People is also defined by external legislation and regulations. Together they form the control frameworks within which USG People seeks to realise its objectives.
Objectives and realising them
The management of USG People develops its strategy whilst taking into account the associated risks and risk appetite. The objectives and strategy form the basis for policy formulation, tactical and operational planning and the operating activities through which we seek to realise our objectives.
Steering mechanisms
Steering mechanisms are needed to achieve the objectives within the control frameworks. These mechanisms include the following:
- the financial and operational planning and control cycles at corporate, regional, country and operating company level. These are supported by manuals, procedures and a detailed accounting manual outlining the principles of valuation and determination of results;
- IT management which safeguards the integrity and continuity of our information using back-up and recovery systems, network and system redundancy and security systems;
- insurance policies to cover the impact of company risks, debtor risks and liability risks;
- risk management aimed at supporting the management in identifying and analysing risks, allowing them to choose the most appropriate measures. Examples include risk workshops organised for the Executive Board and country managers, the issue of a quarterly Letter of Representation and the quarterly risk reviews in which line managers outline the principal risks and how they are being dealt with.
Control by the Executive Board and management
The risk management and control model described above is controlled by the Executive Board and other senior management levels.
Supervision and monitoring
The entire risk management and control system is supervised by the audit committee. The Executive Board and the Supervisory Board receive information from the internal and external audit function. USG People’s centrally organised internal audit function conducts audits and reviews of the various countries and entities. It is supported in its activities by a network of local specialists.
The Executive Board reports to and is accountable to the Supervisory Board with respect to the design and organisation of the risk management and control system.
Assessments identify areas for improvement in our risk management and control systems, which are subsequently implemented and assessed again. This regular assessment process allows USG People to continue to control risks in a constantly changing environment.
MAIN RISKS IDENTIFIED
The main risks relating to our objectives and strategy have been identified and are listed below. They must be borne in mind when assessing other (forward-looking) information in this annual report.
The risk profile has been discussed with the Supervisory Board. However, it cannot be ruled out that this summary may prove to be incomplete in the future. There may be additional risks of which we are currently unaware or risks which are currently classified as limited but which may turn out to have implications in the future.
STATEMENT REGARDING THE EVALUATION OF RISK MANAGEMENT AND INTERNAL CONTROL
The Executive Board is aware that risk management and control systems, however extensive they may be, are unable to provide absolute certainty that all material inaccuracies, losses, fraud and breaches of laws and regulations can be prevented entirely. The policy of the Executive Board remains focused on constantly monitoring and improving the internal risk management and control systems in order to make the processes as reliable and effective as possible. The Supervisory Board and audit committee are informed on the structure and operation of the internal risk management and control systems. It is the opinion of the Executive Board that the risk management and control systems functioned properly in the year under review with respect to the financial reporting risks. These systems provide a reasonable level of certainty that no material inaccuracies are contained in the financial reporting in the current year.
The Executive Board also declares that to the best of its knowledge:
- the annual accounts of USG People give a true and fair view of the assets, liabilities, financial position and profit or loss of the issuing institution and companies jointly included in the consolidation;
- the annual report of USG People gives a true and fair view of the position at the balance sheet date, the course of events during the financial year of USG People and the companies associated with it, the results of which are included in the annual accounts;
- the main risks facing USG People are outlined in the annual report.