Allan Gray is Africa$$s largest privately$-$owned and independent investment management company. It is focused on generating long$-$term wealth for its clients who include individuals, retirement funds, insurers, trusts, companies, and foundations. Who invest through its focused range of unit trusts, retirement products and life insurance investment pools or in segregated portfolios. Allan Gray Limited is headquartered in Cape Town, South Africa. The company also has a presence in other locations, and it manages investments for clients both locally and internationally. It is led by a team of experienced investment professionals and is known for its research$-$driven approach to investment decision$-$making. Like any financial institution, Allan Gray Limited operates within the regulatory framework of the financial industry. It adheres to applicable laws and regulations governing the investment management sector. The Executive Board has made it evident that the primary objective of the organisation is to manage risk exposures across its entire portfolio so that, at any given time, it incurs just enough of the right kinds of risk $-$no more, no less$$to effectively pursue and achieve their strategic goals. They are of the firm belief that risk assessment is important and presents the way in which the organisation can get a handle on how significant each risk is to the achievement of their overall goals.

QUESTION $1(100$ MARKS$)$

You are part of a team from Allan Gray Limited that has been given the responsibility to oversee the process of updating the Enterprise Risk Management Program for the organisation. The expectations are that you will conduct a risk assessment that is practical, sustainable, and easy to understand and that is correctly sized to the enterprise$$s size, complexity, and geographic reach. Your outcomes should be compiled into a report in which the following questions are explored and investigated. $($Your findings should be relevant to Allan Gray Limited, and relevant secondary research should be incorporated$).$

Construct a heat map $($risk map$)$ so that you can be able to prioritise the risks $($Financial risks, Operational risks, Strategic risks and Compliance and legal risks$)$ by ranking them from the highest to the lowest in terms of risk level. This should be conducted when each of the risks have been accurately assessed using descriptive and quantitative scales developed in the previous section of the report. Make use of relevant diagrams and illustrations.