Risk Management

Enterprise Risk Management (ERM) Process

Our Enterprise Risk Management approach is geared towards building a risk intelligent culture that enables sound decision-making and helps the organization operate with greater resilience and efficiency. Our risk management process includes:

Risk Identification

Risk Identification

Risk Assessment and Prioritization

Risk Assessment and Prioritization

Risk Treatment

Risk Treatment

Risk Assessment and Prioritization

Risk Monitoring and Review

Communication and Reporting

Communication and Reporting

Our risk management process is aligned with globally recognized frameworks, including COSO ERM 2017 and ISO 31000:2018. It adopts both top-down and bottom-up approaches to ensure strategic oversight, early identification, and timely escalation of potential risks and issues.

Our framework spans across key risk categories such as financial, operational, regulatory, reputational, strategic, sustainability (ESG), talent, cybersecurity, and technology, enabling a structured and forward-looking risk mitigation process.

ERM Governance

Strides Pharma follows a structured three-level governance model to support the effective implementation of ERM objectives, ensuring accountability and consistency in risk identification, management, and escalation.

Supply Chain Disruptions

The Board, along with its Risk Management & Sustainability Committee (RM&SC), oversees risk governance by framing ERM policies, guiding management, and monitoring key risks and the effectiveness of risk management systems.

The ‘Risk Infrastructure & Management’ function is led by the Group Level Steering Committee

The ‘Risk Infrastructure & Management’ function is led by the Group Level Steering Committee (GLSC) and the Chief Risk Officer (CRO). The GLSC reviews key risks and promotes cross-functional mitigation strategies, while the CRO coordinates ERM activities via the Risk Office. Together with the RM&SC, they support the Board in maintaining independent risk oversight.

Environmental Impact

‘Risk Ownership’ lies with functional heads and risk owners, who identify emerging risks, monitor environments, and oversee mitigation efforts.

Business Continuity Framework

Strides has built a resilient business continuity framework grounded in ISO 22301:2019 and reinforced by industry best practices. Designed to safeguard critical operations and interdependencies, it ensures the ability to respond swiftly and sustain essential functions during disruptions.

The approach is anchored in four core principles: proactiveness, comprehensiveness, integration, and continual improvement. A detailed Business Impact Analysis (BIA) has been conducted across all key departments and units ensuring critical risks are identified, prioritized, and addressed. This robust framework empowers the organization to systematically evaluate risk elements, maintain operational continuity, and comply with statutory requirements.