
Our approach
The Board is accountable for the overall stewardship
of the Group’s Risk Management Framework (RMF),
internal control assurance, and for determining the
nature and extent of the risks it is willing to take in
achieving the Group’s strategic objectives. In doing so
the Board sets preferences for the risks undertaken
and within a strong control environment aims to
generate a return for investors and shareholders and
to protect their interests. The Board also promotes
aGroup-wide strong risk management culture by
encouraging acceptable behaviours, decisions, and
attitudes towards taking and managing risk. Please
refer to the Governance Report on page 66.
Managing risk
Taking on risk in a controlled manner enables the
organisation to capture opportunities, to innovate
and to further enhance our business, for example
new investment strategies or new approaches to
managing our client relationships. Therefore, the
Group maintains a risk culture that provides
flexibility for entrepreneurial leadership within
aprudent risk management and effective
controlframework.
Risk management is embedded across the Group
through the RMF to ensure current and emerging
risks are identified, assessed, monitored, controlled,
and appropriately governed based on a common risk
taxonomy and methodology. The Group’s RMF
operates under the principles of the ‘three lines
ofdefence’ model. The RMF is designed to protect
the interests of stakeholders and meet our
responsibilities as a UK-listed company, and the
parent company of a number of regulated entities.
The Board reviews the RMF regularly, and it forms
the basis on which the Board reaches its conclusions
on the effectiveness of the Group’s system of
internal controls and the Group’s risk profile.
The Board’s oversight of risk management is
proactive, ongoing and integrated into the Group’s
governance processes. The Board Risk Committee
receives regular reports on the RMF activities and
operating effectiveness of the internal control
system. These reports set out significant risks
(Principal Risks) as well as emerging risks faced by
the Group. The Board Risk Committee receives
regular management information and monitors
performance of defined metrics of the Principal Risks
against set thresholds and limits.
The Board also meets regularly with the internal
andexternal auditors to discuss their findings and
recommendations, which provides insight into
areasthat may require enhanced monitoring
orimprovement.
Risk Appetite
Risk appetite is defined as the level of risk which the
Group is prepared to accept in the conduct of its
activities. The risk appetite strategy is implemented
through the Group’s operational policies, procedures
and internal controls. It is monitored by defined
riskappetite metrics which provide early warning
indicators and control exposures and activities that
may have material risk implications. The currentrisk
profile is within our risk appetite and
tolerancerange.
Principal and emerging risks
The Group uses a Principal and Emerging risks
process to provide a current as well as forward-
looking view of the potential risks that can threaten
the execution of the Group’s strategy or operations
over the medium to long term.
The Group’s Principal Risks are individual risks,
oracombination of risks, of which materialisation
beyond tolerance limits could result in events or
circumstances that might threaten our business
model, future performance, solvency, liquidity
andreputation. The Group’s RMF identifies nine
Principal Risks which are accompanied by associated
responsibilities and expectations around risk
management and control. Each Principal Risk is
overseen by an accountable Executive Director,
whois responsible for the framework, policies and
detailed procedures and standards.
Emerging risks are developing risks that cannot
yetbe fully assessed nor quantified but that could, in
the future, affect the viability of the Group’s strategy
or materially impact our current principal risk
exposures. Emerging risks are identified through
regular interactions with stakeholders throughout
the business, attendance at industry events, review
of external publications, and horizon scanning
performed by the relevant functions, including Risk
and Compliance functions. Once emerging risks have
been identified, they can be tracked and monitored
to determine if they represent a key risk exposure
toICG and whether or not any management actions
need to be put in place to mitigate ICG’s exposure to
these risks. Emerging risks are continuously
monitored to ensure that they are appropriately
managed by the Group.
Reputational risk is an important consideration and
is actively managed and mitigated as part of
managing each Principal Risk and the wider RMF.
Similarly, sustainability risk is not defined as
aprincipal risk but is considered across the Group’s
activities as an embedded value. The Group has
determined that the most significant impact from
climate change relates to the underlying portfolio
investments. Climate-related risk for both the
Group’s own investment and fund management
activities are addressed in greater detail in note 1
ofthe financial statements (see page 129).
Directors’ Confirmations
The Board has continued to oversee the further
enhancement of the Group’s risk management
andinternal control processes in line with the
requirements of UK Corporate Governance
Code2024 (the ‘Code’). This involves continuous
monitoring and assessment of risk management
andinternal controls as well as expanded assurance
processes on internal controls, with a focus on
Provision 29 of the Code which applies to our
financial year beginning 1 April 2026.
The Directors confirm that they have reviewed
theeffectiveness of the Group’s risk management
and internal control system and confirm that no
significant failings or weaknesses have been
identified. This is supported by an annual Material
Controls assessment and Fraud Risk Assessment
(other than for Internal Controls over Financial
Reporting which are reported to the Audit
Committee (see page 78), facilitated by the Chief
Control Office, which provides the Directors with
adetailed assessment of related internal controls.
The Directors confirm that they have undertaken
arobust assessment of the principal and emerging
risks facing the business, in line with the
requirements of the Code.
ICG plc Annual Report and Accounts 2026
Overview
Strategic report
Governance report
Auditor’s report and financial statements
Other information
Managing risk
Managing risk to protect
performance and resilience
Effective risk management is a core competence
underpinned by a strong control culture.