
For the year ended 31 December 2021
The principal role of the Committee is
to assist the Bupa Board in articulati
ng and developing its risk management strategy a
nd
providing oversight of risk
across Bupa. This includes understan
ding current and future ri
sk exposures, recom
mending
risk appetite to the Bupa Board, reviewing the cons
istency of corporate strategy with Bupa’s ris
k appetite, reviewing the RMF
considering the risk aspects of major transactions
, and promoting a risk
-
aware culture throughout B
upa. A full description of the
Committee’s role is set out in i
ts Terms of Reference on bupa.com.
A detailed description of the princi
pal risks to Bupa’s bu
and the Group’s approach to, and
implementation of, risk managem
ent systems and controls is
set out in the Risk s
ection.
The Committee members are all
independent NEDs whose col
lective experience and k
nowledge ensures that the
Committee
can provide the Bupa Board with o
ngoing risk management oversight
and advice on strategic risk m
atters. Clare Thompson, Paul
Evans, Michael Hawker and Ca
roline Silver bring additional techni
cal experience from their extens
ive history within the
accountancy, insurance and financi
al services sectors. Matías Rodríguez Inciarte has si
milar experience and he and Mi
ke
NEDs on the boards of the Group’s
Spanish insurance and Australian bus
inesses respectively
, while Paul is a NED on the boards
of Bupa’s UK insurance bus
inesses, bringing to th
e Committee direct ins
ight into our key markets. Pr
ofessor Melvin Samsom h
as
an
extensi
ve medical back
ground, which is especially
relevant when considering cl
inical risks, whil
e his recent experience in
Saudi Arabia offers insight i
nto one of Bupa’s growth markets.
The Bupa Group CEO, Group
CFO, CRO, CMO, CAO
and the lead partner of
th
e External Auditor are inv
ited to attend all
meetings. The CRO has unrest
ricted access to all members of the Committee
and has regular private meetings with the
Committee, in the absenc
e of management, to e
nsure that there is
an opportunity f
or the CRO to rais
e any concerns he may
have. The Committee Chair is also a member of the Bupa Remunerat
ion Committee, to assist with ensuring that risk management
and culture are a factor in remunerati
on decisions. Each year, the Committee c
onsiders whether to make any
recommendations
to
the Bupa Remuneration Committee on making risk adj
ustments to variable remuneration outcomes for that year. For 2021,
having regard to the executive performanc
e evaluation process in plac
e, the Committee did not recommend any
Group
-wide
adjustments to remuneration.
Key activities in 2021
Different risks pose a higher or lower thre
at to the performance and longer
-
term sustainabili
ty of our business at different times
and the Committee adapts its
focus accordingly to ens
ure that new and emergi
ng risks are identified, that the
profile of exis
ting
risks is monitored, and appr
opriate mitigating action i
s taken by management.
This has been partic
ularly important during 202
1
with the continued impact of the pandemic and the
fast pace of change throughout the bus
iness dri
ven by our new 3x6 strategy
.
See the Risk section on page 17 for details
of the principal risks to the Group.
Risks to the 3x6 strategy
Our new strategy is ambitious
and requires Bupa to become more agile and move at p
ace to transform the business
. The strategy
has an impact on the Group’s risk profile and the Committee is monitoring the emerging ris
ks from the strategy and ensuring that
management maintains a strong control environment. In particul
ar, the impact of the strategy on information security, privacy,
clinical and workforce risks
is being monitored closely.
The CRO and CMO provided regular reports on the
pandemic, Bupa’s response and the pandemic
’s impact on the Group’s risk
profile. The Committee was s
atisfied that the Grou
p’s provision businesses had m
anaged their clinic
al response to the pandemic
well and had shared less
ons learned from the fir
st wave of the pandemi
c enabling them to be better p
repared for subsequen
t
waves and for potential similar events
to occur in future. However, the pandemic
continues to give rise to risk
s to our business
through its impact on the econo
my, our people, our supply chains
, the performance of our businesses and longer
-term
government and regulatory responses to the pandemic. T
he Committee is therefore closely monitoring these risks
and
management’s response to them.
The Committee also carefully
considered whether Bupa should mandate v
accination for all staff, discussing the l
egal, ethical and
reputational issues and risks
, and the need to balance the safety of customers
with the right of individuals to choos
e whether, or
not to be vaccinated. The Comm
ittee concluded that
it was supporti
ve of the approach taken by government
vaccination
programmes and it was appropriate to encourage a
nd support our people to be vaccinated but not to mandate vacci
nation, unless
this was a local legal or
regulatory requirement for rol
es. Bupa encouraged all its empl
oyees to be vaccinated as
soon as possible
and worked to address vacc
ine hesitancy in staff, such as i
n UK Aged Care where vaccinati
on was mandated by government.
Environment and climate c
hange risks
Climate risk management h
as been integrated int
o Bupa’s RMF and poli
cies. During the year, the
Committee has ov
erseen the
development of a cli
mate change stress testing framework. Stress t
ests were performed on a range
of climate-related
scenarios
including a longer
-
term scenari
o based on the PRA’s 2021 Climate Biennial Expl
oratory Scenarios (CBES). These stress tests
deepened the Committee’
s understanding of the Group’
s risk profile and will as
sist the Board in future
strategic decision
The Committee has als
o considered the reputational risk from Bupa’
s ambitious target to be a net z
ero business by
2040.
Information security, technology
and operational resili
ence risks
The Committee has continued to clos
ely monitor technology, information security
and privacy risk during the year to ensure th
at
the Group protects the data of i
ts customers, partne
rs, employees and suppli
ers, and that the Group’s t
echnology systems remain
resilient. The Committee has als
o focused on the embedding of requi
rements under the Group’s Operational Resil
ience Policy
that came into force in January 2021. Operati
onal resilience was i
dentified as an increasing ri
sk in light of the continued pandemi
c
and the level of change required ac
ross the Group to achieve the new 3x6 s
trategy.