Ombud Council AR 2026

PART C: GOVERNANCE

Table 12: Remuneration of Board and Committee Members

Remuneration In Rand

Other allowances

Other reimbursements Total in Rand

Name

Ms Eileen Meyer

R45 372 R65 007 R38 778 R53 427 R50 934

Nil Nil Nil Nil Nil Nil Nil Nil Nil

R80 871 R4 732 R15 048

R126 243 R69 739 R53 826

Adv. Dikeledi Chabedi

Ms Charmaine Soobramoney

Mr Emmanuel Lekgau Mr Adam Horowitz Mr Unathi Kamlana Ms Lebogang Senne Mr N Esterhuizen Ms Leanne Jackson

Nil

R53 427 R75 106

R24 172

N/A

Nil

Nil

R65 403 R32 412

R17 654 R12 159

R83 057 R44 571

N/A

Nil

Nil

R505,789

TOTAL

R351,153

Nil

R154,636

5. Risk Management During the year under review, the Council managed and reported its risks using an integrated Governance, Risk and Compliance (GRC) Framework, which was approved by the Board and adopted by the Council in the 2025/26 financial year. The GRC framework comprises the following elements: • GRC Policy. • GRC Capacity, Competency and Capability assessment. • Annual Governance, Risk and Compliance Plan. • Risk Appetite Tolerance and Capacity Framework (RATCF). • Risk Context. • Risk and Emerging Risk Scan. • Risk Profile against RATCF. • Risk Register.

in accordance with the GRC Risk Appetite framework, the ARC and, where applicable, the Board, approved the tabled risk mitigation actions. • Risk Assessment Process The Council conducts both formal and dynamic risk assessments as part of the GRC report using the following methodology: • Identification: Risks are identified through workshops involving executive management and the Board, supplemented by horizon scanning of the financial services and broader regulatory environment and emerging developments. • Assessment: Each risk is assessed using a rating based on likelihood (Unlikely to Almost Certain) and impact / consequence (Minor to Catastrophic), aligned with the approved Risk Appetite and Tolerance Statement. • Evaluation: Risks are plotted against the Council’s risk appetite, tolerance, and capacity thresholds. • Treatment: Risk response plans are developed with clear action owners and due dates. • Monitoring: Key risks are reviewed quarterly by the ARC via the integrated GRC report, with management of any risks rated as being outside tolerance reported to the ARC and, in appropriate cases, to the Board at more frequent intervals. • Principal Risks and Mitigation During the 2025/26 financial year, the Council identified and actively managed seven principal risks across three strategic priority areas. The table below summarises the entity’s main risks, their residual risk ratings as at 31 March 2026, and key mitigation measures.

• Compliance Universe. • Compliance Monitoring. • Compliance Training. • GRC Reporting. • Risk Governance Structure.

Implementation of the GRC framework is overseen by the Audit and Risk Committee (ARC) and the Board. At each scheduled quarterly meeting of the ARC (July 2025, October 2025, January 2026, and April 2026), a consolidated GRC report, including the updated risk profile and mitigation progress and progress against the annual GRC Plan, was tabled and noted. Where required

Ombud Council 2025/26 Annual Report

51