Risks and risk management

Castellum defines risk as an uncertainty factor that may affect the company’s ability to achieve the objectives it has set. Risk management aims at balancing the desire to limit the company’s risks and achieve the company’s objectives. In order to assess the effect of identified risks, an annual internal risk survey is conducted in which each risk is assessed based on both impact and likelihood. This process determines if the risks should be further monitored, if actions need to be taken or if they can be handled through standard review and management. All the risks are then consolidated, and the result is Castellum’s overall risk assessment. The risks are analysed primarily from a three-year perspective. To facilitate risk management, Castellum has chosen to classify risks into the following categories:

Castellum regularly evaluates new and evolving risks that could affect the business over time. Emerging risks are marked by uncertainty but could cause significant effects should they occur. Castellum has identified regulatory uncertainty in the construction industry and increased external demands for sustainable governance as examples of two emerging risks.