7.1 Introduction

Risk management aims to build value for all PZU Group stakeholders by actively and deliberately managing the quantum of risk accepted. The essence of the process also involves preventing the acceptance of risk at a level that could pose a threat to the financial stability of the PZU Group, which is also a financial conglomerate.

Risk management in the PZU Group is based on risk analysis in all processes and units. Risk management is an integral part of the management system.

To ensure sectoral consistency and the execution of the strategic plans of individual companies as well as the business objectives of the entire PZU Group, the main elements of PZU Group’s risk management have been implemented. They include among others:

• systems of limits and limitations on the acceptable level of risk, including the level of risk appetite;
• processes involving identification, measurement and assessment, monitoring and control, reporting and management measures pertaining to individual risks and significant risk concentration;
• risk management organizational structure in which the management boards and supervisory boards of the entities and dedicated committees play a crucial role.

Entities from the financial sector are additionally obligated to apply the appropriate standards for a given sector. The adopted internal regulations specify among others:

• processes, methods and procedures facilitating risk measurement and management;
• split of duties in the risk management process;
• scope and conditions and the frequency of risk management reporting. The risk management system in the PZU Group is based on the following:
• a split of duties and tasks performed in the risk management process by statutory bodies, committees and individual organizational units and cells;
• risk management process, including risk identification, measurement and assessment, monitoring and control methods, risk reporting and undertaking management actions.

PZU exercises supervision over the PZU Group’s risk management system on the basis of mutual cooperation agreements entered into with Group entities. PZU manages the PZU Group risk from an aggregated perspective and on the basis of the information provided thereunder. The agreements entered into and the scope of information to be provided take into consideration the specific legal nature of each entity, including limitations arising from banking secrecy rules.