* In descending order from greatest potential challenge to our business model.
The timing of the ERM process in ARM is aligned with our assurance and corporate governance requirements. However, risk management is not an activity that takes place only at stated intervals, but continuously through all phases of the business and with every major change in the business and operations. All risk activities are timed to facilitate risk input into the ARM strategic planning process as committed to in our ERM policy.
We report on the results of our risk assessment activities to the following governance structures:
| Committee | Attendance | Reporting |
| ARM level | ||
| Board | * | |
| Audit and risk | ||
| Social and ethics | ||
| Management risk and compliance | ||
| Technology and information | ||
| Divisional level | ||
| Social and ethics or sustainable development | ||
| Audit and risk |
* Annually.
Our ERM strategic pillars are aimed at integrating various risk management disciplines that will ultimately drive us towards a desired position.

Our risk management framework is premised on the principles of ISO 31000:2018 and contains all the necessary elements shown on the previous page. Our risk assessment process is outlined below.

Our top 10 risk profile as at end-June 2025

ARM has a number of policies and frameworks that govern how we manage risk, resilience, assurance, asset management and other aspects of our risk (details are available on request). Current notable policies and frameworks include:
| Risk | Our response | ||
|
1
|
Continuing volatility in commodity prices (potential upside/downside)
|
|
|
|
2
|
Underperformance of Transnet (rail and ports) due to poor state of infrastructure
|
|
|
|
3
|
Delay in project execution, inefficient capital allocation, and unrealised value
|
|
|
|
4
|
Data privacy, cyber, including business continuity preparedness
|
|
|
| Risk | Our response | ||
|
5
|
Increased production unit costs and reduced recoveries
|
|
|
|
6
|
Increased optionality for growth (opportunity risk)
|
|
|
|
7
|
Safety performance deteriorated
|
|
|
|
8
|
Increased ESG requirements
|
|
|
|
9
|
Unreliable water supply and
delayed pipeline upgrade
project in the Northern Cape
|
|
|
|
10
|
Restructuring of operations,
resulting in low staff morale
|
|
|