Material risks

The main purpose of risk management is to adequately position the organisation to understand and respond to potential risks that could materially impact the execution of our strategy and our ability to create value.

Our Group’s primary risks are identified within the context of our strategy to proactively respond to ever-changing internal and external operating environments. We continue to ensure that we strengthen the link between our strategy and the Group’s risks by applying our Enterprise Risk Management (ERM) process in the context of our key business requisites.

In pursuing our goals towards creating, preserving and realising value for our stakeholders, within our ERM Framework, we aim to proactively manage risks and opportunities in a dynamic operating context. Our ERM process ensures the adequacy, appropriateness and effectiveness of our responses, mitigating potential significant negative business impacts in order to deliver on our business targets.

Description

Since the majority of the Group's inventory is of a virtual nature, defence against cybercrime will remain a top priority.

The Group is dependent on the systems and platforms that enable its products and services on which it manages its merchant base. Blue Label's technology spend has increased in recent years in support of its importance to both organic and inorganic growth, as well as simultaneously to improve system availability and resilience as the volumes of both the number and types of transactions increase.

Mitigating measures

  • Blue Label places significant focus on the security of all systems, both production and enterprise, in order to pre-emptively detect, prevent and manage security threats and, in the event of a cybersecurity breach, recover expediently.
  • Independent third parties continually conduct vulnerability scans and penetration tests to ensure that Blue Label's systems are as secure as possible and that new threats are appropriately addressed.
  • A Security Operations Centre (SOC) is currently being rolled out to assist in countering cybercrime risks. The SOC will be fully operational during FY2023.
  • CrowdStrike, an advanced cloud-native platform, has been implemented to counter malware threats.
  • All Blue Label staff members are mandated to participate in an ongoing cybersecurity awareness training programme, which was enhanced in light of most of them working remotely.
  • Cyber insurance cover is in place to protect the Group in the event of a breach.

Description

The failure of Cell C's strategy and execution of its business plan would not only negatively impact the investment therein, but would also have a compounded effect on the Blue Label Group, in that a significant portion of its profitability stems from its trading relationship with Cell C.

Mitigating measures

  • The Cell C recapitalisation transaction has achieved the deleveraging of its balance sheet, providing it with liquidity with which to operate and enhance its businesses and to position itself to achieve long-term success for the benefit of its customers, employees, creditors, shareholders and other stakeholders.
  • Cell C has implemented a turnaround strategy, focusing on operational efficiencies, reducing operational expenditure and optimising traffic. This includes a significant reduction in capital expenditure and a conversion of a fixed-cost infrastructure-based network to a variable operational expenditure model. This, together with the recapitalisation of the current debt structure, will result in a significant improvement of its liquidity and enable long-term sustainability of Cell C.
  • Cell C embarked on a strategy to reconsider its current service offering, whereby Cell C identified the need to either wind down or restructure the service offering being provided to its postpaid mobile telecommunication business (the base). During the 2021 financial year, the Group, through its subsidiary Comm Equipment Company (CEC), entered into an arrangement with Cell C to facilitate Cell C's operation of the base. The aim of the reorganisation would be for the base to remain intact and grow in the future, and for Cell C to have limited downside risk on the base.
  • The implementation of the extended roaming agreement with MTN commenced on 1 May 2020. This enables network innovation, promotes efficient network infrastructure utilisation and sustainable investment in network infrastructure. The transition to the new business model commenced on 1 January 2021.
  • During the reporting period, Cell C participated in the ICASA ITA auction in respect of the licensing process of high-demand spectrum and was awarded 10MHz in the 3 500MHz band.
  • To contribute to the success of Cell C, Blue Label has representation on the board of directors, which will afford it complete oversight of the performance of the company and the ability to ensure that the agreed strategy is implemented at Cell C. The above contributions, combined with the major reduction in interest-bearing debt and the elimination of foreign exchange exposure thereto, are all positive indicators for sustainable success and longevity.

Description

Due to the nature of our digital inventory, the Group is vulnerable to fraudulent activities.

Blue Label maintains zero tolerance for fraud and irregularities. All incidents are investigated, irrespective of the size or value.

The ongoing roll-out of new products/solutions increases the exposure to potential fraud-related activities.

Mitigating measures

  • We continue to refine operational controls, security, and our infrastructure to mitigate the risk of fraud.
  • Fraud and ethics are discussed at Board level by both the Social, Ethics and Transformation Committee (SETC) and the Audit, Risk and Compliance Committee (ARCC.)
  • The ethics hotline, hosted by Deloitte, remains available for anonymous reporting of any instances or suspicions of fraud.
  • Staff are mandated to participate in digital programmes that enhance awareness relating to fraud and ethics. A code of conduct, disciplinary policy and fraud policy are in place.
  • We have developed a Fraud Management Framework that addresses the risk of fraud within the Group.

Description

Historically, the Group specialised in the distribution of products. Going forward, Blue Label needs to evolve so that technology drives product development, or it risks losing market opportunities to more digitalised or agile competitors.

Mitigating measures

  • Management has embraced the change in mindset, spurred on by the necessity to implement digitalisation in the face of lockdown in prior years. Various technology-driven initiatives were developed and brought to market during that time and will continue to be brought to market.
  • The Group's commercial offerings are being transformed through automation, consumer reach, consumer-centric design, enhanced software build and release mechanisms, simplified integrations and platform flexibility and scalability.

Description

Business Continuity Plans (BCPs) and Disaster Recovery Plans (DRP) ensure that the business is prepared for severe interruptions and that business processes continue with minimum downtime during cases of emergency or disaster.

If the BCPs are misinterpreted or not properly in place, the potential breakdown of critical business processes could harm the Group's profitability and reputation.

Mitigating measures

  • Blue Label's BCM steering committee meets bi-annually to ensure that the Group is prepared to counter any risk.
  • Active-active failover architecture is implemented throughout the Group.
  • BCP consultants have reviewed Blue Label's BCPs and the Group has implemented their recommendations.
  • COVID-19 offered a unique opportunity to test our DRP, which proved to be resilient. Employees could operate remotely with minimal disruption to operations.
  • We reaffirm that we will conduct simulation exercises to validate BCPs in place including our DRP in FY2023 to ensure that all applicable staff, in the event of disruption, are aware of their roles and responsibilities.

Description

Certain prominent financial institutions and retailers rely on Blue Label to process their substantial transaction volumes. A lapse in the Group's service delivery to these stakeholders could result in a major negative impact on its profitability and/or reputation.

Mitigating measures

  • Blue Label maintains long-standing relationships with these parties and has an impressive track record of service delivery.
  • Mature failover and business continuity mechanisms provide a high degree of certainty that we maintain uptime beyond 99%, even as transaction volumes continue to grow.
  • Software release methodology and application-level failover reduces the need for system downtime during system release and maintenance windows

Description

E-tokens are a form of electronic cash utilised for secure transactions. The Group relies on the high-volume, low-margin distribution and sale of e-tokens of value. Blue Label, therefore, needs to protect its virtual stock from theft, the corruption of voucher pins and cybercrime.

Mitigating measures

  • The confidentiality, integrity and availability of virtual stock is managed through role-based access control, secure transfer of supplier/customer files and encryption with hardware security modules.
  • A robust set of automated internal controls assists in timeous detection and prevents the theft or corruption of voucher pins and related digital products.
  • Sufficient insurance cover is in place.

Description

As Blue Label processes large transaction volumes to multiple vendors and across various systems, our reconciliation and settlement process must operate efficiently to prevent loss of revenue and enhance customer satisfaction.

Mitigating measures

  • The Group is currently working on automating all main reconciliations during FY2023. Currently, the various finance departments resolve any partially matched or unmatched files daily and an escalation process is in place.
  • We aim to also strengthen our segregation of duties function within this process.

Description

Business-related fraud is consistently a risk. The Group needs to be diligent at all times to mitigate the possibility of fraud when launching new products.

Mitigating measures

  • Several key appointments serve to protect the Group from fraud, while employee accountability and responsibility campaigns ensure that every staff member is aware of their role and duty to prevent fraud.
  • BLT's Technology division assists with, prioritises and supports efforts to address internal control gaps. Our new formal "Protect our Business" initiative was finalised during FY2021 and places a strong focus on identifying control gaps in systems and processes. The Head of Fraud and the business improvement team continuously work to close such gaps and to improve thereon. This reduces the Company's overall risk exposure and associated losses. BLT appointed an external service provider to map the as-is processes in high-risk areas.
  • Furthermore, there is a strong focus from a fraud, risk and compliance perspective to mitigate any risks from the early stages of any new product initiatives before the product is made available to the market. A formal sign-off process has been implemented throughout the Group.

Description

Each subsidiary is highly dependent on its respective suppliers to achieve its business objectives.

Should our customers (or aggregators) with a significant market footprint deal directly with the utilities, they effectively become competitors to the detriment of Blue Label.

In addition, there is potential for network operators to launch applications whereby consumers are granted direct access to airtime purchases from them.

Mitigating measures

  • Blue Label's management nurtures relationships with existing suppliers and has a strong track record with them. Long-term contracts with suppliers ensure sustainable business relationships.
  • Margin management, the breadth of Group product suites, and efficient technological integration into customer back-end systems reduces the risk of disintermediation.