Sr TM Enterprise Risk Management Executive

(min 4 pointers to max 10 pointers of KRA) Key Result Areas/Accountabilities Supporting Actions

1. ERM Framework Implementation: Implementation of Risk Management Process at all levels across the Belagavi Refinery and Corporate functions. Risk identification assessmen tprioritization mitigation monitoring and reporting Continuous implementation of ERM 6 step Process

• o Risk identification techniques
• o Risk assessment tools
• o Risk Prioritization
• o Mapping of Controls and identifying Response strategies
• o Tracking & monitoring of Risk & Mitigation

o Review & reporting o Supplement identification by analyzing industry trends and emerging issues Ensuring Risk criterion followed (Appetite /Tolerance /Risk limits) for Risk Assessments Benchmarking and study of best practices across industry Facilitate Risk register updation at a defined frequency Collaborate with various assurance functions like Compliance, Audit, Legal, Safety, Quality etc. to improve internal practices Facilitate continuous Risk Identification Regular Loss event capturing and analysis Continuous capturing of Near Miss events Risk assessment of Annual business plans

2. Risk Culture Building: Risk culture ensures that Business decisions are made to optimize stakeholder value through addressing risk and leveraging opportunities Training of Risk Owners to make them Risk Intelligent Managers .

• o Build a Risk Mindset
• o Aware about known risks o Skill to identify unknown risks Integrate ERM with decision making and performance management
• o Risk Enabled Decision making

o Risk Enabled performance management Establish lines of communication for risk information sharing ERM Newsletters, Awareness campaign Periodic Knowledge sessions for risk community

Report Work with Risk leaders, Risk champions, Risk coordinators to drive the culture

3. ERM Goverce: Establishing/Ensuring continuous Monitoring & Reporting Ensure regular Risk reviews at business and unit/function levels Facilitate in identifying accurate lead and lag indicators to track mitigation Guiding all users for using the ERM tool and ensuring regular updation Periodic Risk reporting highlighting progress and exception Assist ERM head to standardize reporting and to create a repository for Risk Mgmt. knowledge. Periodical Risk Maturity assessment

4. Emerging Risk Identification & ThirdParty Risk management Regular Horizon/Global scanning to identify emerging risks for short, medium and long term Scenario analysis to identify unknown risks Identify source of ThirdParty risks Implement Third party risk management framework Continuous monitoring and reporting of thirdparty risks

5. Crisis Management Implementation of Crisis Management Framework, regular review and update and thereafter ensuring continuous adherence for existing and new plants Crisis management approach alignment with ISO 22361 Continuous strengthening of identified crisis action plans, goverce/crisis team structure and responsibility mapping Ensuring Mock drills conduct periodically: implementation of gaps identified during mock drills Facilitate in periodic benchmarking with internal plants and similar industry for best practices Continuous scan the global environment and capture crisis events and map action plans Custodian for Knowledge repository

6. Business Continuity Management (BCM) Development of Business Impact Assessment, Threat assessment, Mitigation actions, Maximum allowable outage, Recovery time objectives for existing and new plants

5 | Page Report Facilitate in building the overall BCM document in line with ISO22301 Continuous tracking and monitoring of action plans identified in BCM document Periodic effectiveness checking of BCM Facilitate in periodic review of respective BCM document with stakeholders Continuous updation of BCM document wrt to new derailers, changing global environment etc. Continuous training & awareness on BCM concepts Custodian for Knowledge repository

7. Capex Project Risk Management (PreApproval and PostApproval) Identify Risks to the Assumption at the capex proposal stage Facilitating Project Risk Management post approval o Implement ERM process Identification to mitigation plans o Establishing Project Risk goverce mechanism o Facilitating Project Risk reporting o Facilitating Risks coordination between cross functional teams Keeping knowledge repository for Project risk management learning post completion of projects 8. Other Engagements: