complete the online module every two (2) years. The purpose of the e-learning module is to inculcate a risk thinking mindset and strengthen informed decision-making among TNB executives. The e-learning module is continually reviewed taking into account changes in the TNB Risk Management Framework and its implementation. Culture The risk culture delineated within the TNB Risk Management Framework harmonises seamlessly with the six (6) TNB core values and corresponding behaviors. The application of these core values and behaviours serves as a beacon, offering clear guidance and communicates the expected behaviour of employees. This alignment fortifies a cohesive understanding, establishing a framework for fostering and perpetuating a resilient and enduring risk culture essential for TNB’s sustainable growth and resilience. INTERNAL CONTROL STATEMENT ON RISK MANAGEMENT AND INTERNAL CONTROL Group Policiesand Procedures The Board and Management have approved group-wide policies and procedures, embedding ethics and internal control principles and mechanisms within business operations. Regular review processes ensure the ongoing relevance and effectiveness of these policies and procedures. Among others, the Group policies and procedures in place are: TNB Code of Business Ethics TNB ICT Security Policy and ICT Codes of Practice TNB Ethics & Integrity Policy TNB Safety & Health Policy TNB Risk Management Policy TNB Confidentiality Policy TNB Asset Management Policy TNB Limits of Authority TNB Procurement and Supply Chain Policy and Procedures TNB Environmental Policy TNB Security Policy TNB Communication Policy TNBInvestmentProcessControl:UpdatedInvestmentProcess andInvestmentRiskMethodology TNB Personal Data Protection Policy TNB Group Financial Policies and Procedures TNB Disciplinary Procedures TNB Group Human Resource circulars and guidelines CREATING VALUE THROUGH STRONG GOVERNANCE Sec 4 189 Financial and Operational Control Framework The TNB Group Financial Policies and Procedures (GFPP) stand as an imperative