Risk management plays a crucial role in mitigating the impact of events that could negatively affect the organization. At LTIMindtree, we embed risk management into daily decision-making across all functions, fostering a culture that is aware of and responsive to risks and opportunities. We continuously assess risks and opportunities to ensure alignment between our business strategy and the internal and external environment.
Our acclaimed risk-management framework facilitates informed and responsible risk-taking by systematically and proactively identifying, assessing, treating, monitoring, and reporting risks. The Board and senior management provide robust oversight for our comprehensive risk management program. LTIMindtree's Enterprise Risk Management (ERM) framework adheres to the ISO 31000 Risk Management Guidelines, ensuring alignment with international standards.
The aim of Enterprise Risk Management (ERM) is to comprehensively manage risks to the organization, sustaining business growth and profitability through effective governance and strategies. The ERM framework establishes a robust Risk Governance structure to formulate the organization's risk management strategy and attain key business objectives, offering insights into the primary risks facing the organization. This facilitates risk-informed decision-making at the Board and executive management levels. Governance forums at different tiers ensure that risks are identified, reviewed, and addressed throughout the organization. The Chief Risk Officer oversees Risk Management activities and is supported by the ERM team.
Risk Management Committee (RMC) is an apex body comprising of the Board Committee and has a focused agenda of overseeing Key Enterprise Risks. The forum discusses and deliberates on external risks/disruptive trends and its mitigation plans. Emerging risks in context to organization vision in next few years are also discussed. RMC is convened on a quarterly basis.
Audit Committee (AC): Audit Committee (AC) is a Board Committee with focused agenda on risks and internal controls. AC meetings are conducted on a quarterly basis.
Risk Operating Committee (ROC): Risk Operating Committee (ROC) comprises of CXOs and senior leadership. ROC meeting is conducted once in a quarter, where risks perceived to the organization are discussed and deliberated, including Enterprise level risks, Data Privacy risks, Cyber Security risks, Business Continuity risks, Crisis Management, Third Party Risks, Regulatory risks and any other risk as applicable.
Business Unit (BU) ERM Cadence Meeting: Business Unit level risks are discussed in the monthly cadence meeting. The meeting is convened by the Business Unit Risk Champion and is attended by the Business Unit Head and other Senior Leadership.
ERM Framework implements management of risks at various layers of the organization including risks at project level, account level, Business unit level and Enterprise level. Detailed risk management process helps to identify and treat the risks before it surfaces as an issue. The process is enabled through a digital platform that provides an enterprise-wide view of risks, enabling informed decision-making.
ENTERPRISE LEVEL RISKS AND THEIR TREATMENT
Frequent changes in leadership may affect Delivery and Customer relationships. Higher attrition rates can result in increased operational costs and diminish goodwill.
In the ever-changing landscape of business and technology, we face risks related to workforce utilization and technological obsolescence. Due to the industry's dynamic nature, there is uncertainty in strategically planning skills in advance and reallocating our talent to meet demand while enhancing technical competencies and skills.
Business-Aligned Skill Needs Assessments
Competency Manager Network
Upskilling Initiative
Lack of strong cyber security posture across people, processes, and technology can weaken cyber resilience and undermine client confidence. Inadequate controls in cyber security may expose vulnerabilities, resulting in:
Failure to comply with privacy laws may result in significant financial penalties and damage to reputation.
ESG considerations and their related risks and opportunities are increasingly pertinent, driven by heightened expectations from investors, customers, and regulatory bodies. Inadequate transparency and delayed reporting may result in non-compliance and reputational damage with stakeholders
Environment
Social
Governance
Crucial Deliveries, milestones and commitments can get impacted due to Integration.
Integrating two former entities into LTIMindtree carries inherent risks:
Integrating two entities is a multifaceted endeavor, requiring a comprehensive framework be built to harmonize numerous activities and processes:
There is a risk to our revenue growth due to:
Sales Transformation Programs aimed at driving growth during challenging times will operate through four streams:
Failing to stay abreast of relevant technological trends may result in increased time for industrialization due to excessive disruptions.
Implement a process to regularly publish the Technology Radar, showcasing identified, selected, and evaluated technologies. These technologies can be viewed as either threats or opportunities for the future.
A significant portion of our revenue comes from a select group of major clients. This higher concentration of revenue among a limited number of customers poses a risk to the Company's overall revenue if we encounter specific issues with any of these customers.
Given the increased size of LTIMindtree post integration, business concentration with top customers has reduced
The current economic instability is driving up labor and operating costs, compounded by increased pressure from clients for discounts and price reductions. Additionally, the return of the workforce to office premises may escalate operational costs, thereby impacting margins.
Five-pronged approach under Program ‘NorthStar’ to improve margins:
Engaging in fraudulent activities poses the risk of eroding trust from clients, shareholders, and investors, resulting in operational, financial, and reputational harm. Such actions could detrimentally affect our organization's brand and market share.