14. In Year 1, a multinational group comprised of Company A (a country A corporation) and Company B (a country B corporation) decides to develop an intangible, which is anticipated to be highly profitable based on Company B’s existing intangibles, its track record and its experienced research and development staff. The intangible is expected to take five years to develop before possible commercial exploitation. If successfully developed, the intangible is anticipated to have value for ten years after initial exploitation. Under the development agreement between Company A and Company B, Company B will perform and control all activities related to the development, enhancement, maintenance, protection and exploitation of the intangible. Company A will provide all funding associated with the development of the intangible (the development costs are anticipated to be USD 100 million per year for five years), and will become the legal owner of the intangible. Once developed, the intangible is anticipated to result in profits of USD 550 ... Read more

When the captive insurance does not have access to the appropriate skills, expertise and resources and, therefore, the captive insurance is not found to exercise control functions related to the risks associated to the underwriting, an analysis under Chapter I, based on facts and circumstances, may conclude that the risk has not been assumed by the captive insurance or that another MNE is exercising these control functions. In this latter case, the return derived from the investment of the premiums would be allocated to the member(s) of the MNE group that are assuming the risk associated with the underwriting in accordance with the guidance in Chapter I ... Read more

Captive insurances may be self-managed from within the MNE group, or managed by an unrelated service provider (often a division of a large insurance broker). Typically this management would include ensuring compliance with local law, issuing policy documents, collecting premiums, paying claims, preparing reports and providing local directors. If the captive insurance is managed from within the MNE group it is necessary to determine which entity manages it (if such management is not exercised by employees of the captive insurance) and to appropriately reward that management ... Read more

The insurer is carrying out a risk mitigation function in respect of the insured party’s risk but not actually assuming that risk. It is assuming the risk of insuring (i.e. mitigating) the insured party’s risk. That risk will be controlled by either the insurer or (more likely in a captive insurance scenario) another entity within the MNE group that makes the decision that the risk should be assumed by the insurer. (See paragraph 10.223). The insurer (or other entity) can make decisions as to how to respond to this risk – in accordance with paragraph 1.61 (ii) – by, for example, further diversifying its portfolio of insured risks or by reinsuring ... Read more

Although the quantum of the risk reward for the insured party and the insurer might be dependent upon exactly the same events in both cases, that quantum could be significantly different (for example, if the insured risk materialises and a claim is made, the insured party could potentially receive significant upside relative to the premium paid whereas the insurer’s income will be limited to the insurance premiums and investment income it has received regardless of the quantum of risk reward received by the insured party) ... Read more

The principles of accurate delineation of the actual transactions and allocation of risk detailed in Chapter I of these Guidelines apply to captive insurance and reinsurance in the same manner that they apply to any other intra-group transactions. However, this section addresses mainly captive insurance (as well as captive reinsurance – fronting). In particular, it should be borne in mind that: the carrying on of risk mitigation functions falls within the wider concept of risk management but not within that of control of risk (see paragraphs 1.61 and 1.65); there is a difference between the specific risk being insured (the party taking the decision to insure – i.e. mitigate – or not, controls this risk; that party will usually be the insured but may be another entity within the MNE group) and the risk taken on by the insurer in providing insurance to the insured party ... Read more

The terms of the compensation that must be paid to members of the MNE group that contribute to the development, enhancement, maintenance, protection and exploitation of intangibles is generally determined on an ex ante basis. That is, it is determined at the time transactions are entered into and before risks associated with the intangible play out. The form of such compensation may be fixed or contingent. The actual (ex post) profit or loss of the business after compensating other members of the MNE group may differ from these anticipated profits depending on how the risks associated with the intangible or the other relevant risks related to the transaction or arrangement actually play out. The accurately delineated transaction, as determined under Section D. 1 of Chapter I, will determine which associated entity assumes such risks and accordingly will bear the consequences (costs or additional returns) when the risks materialise in a different manner to what was anticipated (see Section B.2.4) ... Read more

Where a party contributes to the control of economically significant risk, but that risk is assumed by the other party to the transaction, this may, in some cases, demonstrate that it is appropriate for the first party to share in the potential upside and downside associated with that risk, commensurate with its contribution to control. See paragraph 1.105. However, the mere fact that an entity performs control functions in relation to a risk will not necessarily lead to the conclusion that the transactional profit split is the most appropriate method in the case ... Read more

The difference between ex ante and ex post returns discussed in particular in Section D of Chapter VI arises in large part from risks associated with the uncertainty of future business outcomes. As discussed in paragraph 1.78 the ex ante contractual assumption of risk should provide clear evidence of a commitment to assume risk prior to the materialisation of risk outcomes. Following the steps in this section, the transfer pricing analysis will determine the accurate delineation of the transaction with respect to risk, including the risk associated with unanticipated returns. A party which, under these steps, does not assume the risk, nor contributes to the control of that risk, will not be entitled to unanticipated profits (or required to bear unanticipated losses) arising from that risk. In the circumstances of Example 3 (see paragraph 1.85), this would mean that neither unanticipated profits nor unanticipated losses will be allocated to Company A. Accordingly, if the asset in Example 3 were unexpectedly ... Read more

A party should always be appropriately compensated for its control functions in relation to risk. Usually, the compensation will derive from the consequences of being allocated risk, and therefore that party will be entitled to receive the upside benefits and to incur the downside costs. In circumstances where a party contributes to the control of risk, but does not assume the risk, compensation which takes the form of a sharing in the potential upside and downside, commensurate with that contribution to control, may be appropriate ... Read more

Guidance on the relationship between risk assumption in relation to the provision of funding and the operational activities for which the funds are used is given in paragraphs 6.60-6.64. The concepts reflected in these paragraphs are equally applicable to investments in assets other than intangibles ... Read more

The consequences of risk allocation in Example 3 in paragraph 1.85 depend on analysis of functions under step 3. Company A does not have control over the economically significant risks associated with the investment in and exploitation of the asset, and those risks should be aligned with control of those risks by Companies B and C. The functional contribution of Company A is limited to providing financing for an amount equating to the cost of the asset that enables the asset to be created and exploited by Companies B and C. However, the functional analysis also provides evidence that Company A has no capability and authority to control the risk of investing in a financial asset. Company A does not have the capability to make decisions to take on or decline the financing opportunity, or the capability to make decisions on whether and how to respond to the risks associated with the financing opportunity. Company A does not perform functions ... Read more

In the circumstances of Example 2 in paragraph 1.84, the significant risks associated with generating a return from the manufacturing activities are controlled by Company A, and the upside and downside consequences of those risks should therefore be allocated to Company A. Company B controls the risk that it fails to competently deliver services, and its remuneration should take into account that risk, as well as its funding costs for the acquisition of the manufacturing plant. Since the risks in relation to the capacity utilisation of the asset are controlled by Company A, Company A should be allocated the risk of under-utilisation. This means that the financial consequences related to the materialisation of that risk including failure to cover fixed costs, write-downs, or closure costs should be allocated to Company A ... Read more

In the circumstances of Example 1 in paragraph 1.83, Company A assumes and controls the development risk and should bear the financial consequences of failure and enjoy the financial consequences of success. Company B should be appropriately rewarded for the carrying out of its development services, incorporating the risk that it fails to do so competently ... Read more

Following the guidance in this section, the accurately delineated transaction should then be priced in accordance with the tools and methods available to taxpayers and tax administrations set out in the following chapters of these Guidelines and taking into account the financial and other consequences of risk-assumption, and the remuneration for risk management. The assumption of a risk should be compensated with an appropriate anticipated return, and risk mitigation should be appropriately remunerated. Thus, a taxpayer that both assumes and mitigates a risk will be entitled to greater anticipated remuneration than a taxpayer that only assumes a risk, or only mitigates, but does not do both ... Read more

In exceptional circumstances, it may be the case that no associated enterprise can be identified that both exercises control over the risk and has the financial capacity to assume the risk. As such a situation is not likely to occur in transactions between third parties, a rigorous analysis of the facts and circumstances of the case will need to be performed, in order to identify the underlying reasons and actions that led to this situation. Based on that assessment, the tax administrations will determine what adjustments to the transaction are needed for the transaction to result in an arm’s length outcome. An assessment of the commercial rationality of the transaction based on Section D.2 may be necessary ... Read more

If it is established in step 4(ii) that the associated enterprise assuming the risk based on steps 1 – 4(i) does not exercise control over the risk or does not have the financial capacity to assume the risk, then the risk should be allocated to the enterprise exercising control and having the financial capacity to assume the risk. If multiple associated enterprises are identified that both exercise control and have the financial capacity to assume the risk, then the risk should be allocated to the associated enterprise or group of associated enterprises exercising the most control. The other parties performing control activities should be remunerated appropriately, taking into account the importance of the control activities performed ... Read more

In light of the potential complexity that may arise in some circumstances when determining whether an associated enterprise assuming a risk controls that risk, the test of control should be regarded as being met where comparable risk assumptions can be identified in a comparable uncontrolled transaction. To be comparable those risk assumptions require that the economically relevant characteristics of the transactions are comparable. If such a comparison is made, it is particularly relevant to establish that the enterprise assuming comparable risk in the uncontrolled transaction performs comparable risk management functions relating to control of that risk to those performed by the associated enterprise assuming risk in the controlled transaction. The purpose of the comparison is to establish that an independent party assuming a comparable risk to that assumed by the associated enterprise also performs comparable risk management functions to those performed by the associated enterprise ... Read more

If it is established that the associated enterprise assuming the risk as analysed under step 4(i) either does not control the risk or does not have the financial capacity to assume the risk, then the analysis described under step 5 needs to be performed ... Read more

Where two or more parties to the transaction assume a specific risk (as analysed under step 4(i)), and in addition they together control the specific risk and each has the financial capacity to assume their share of the risk, then that assumption of risk should be respected. Examples may include the contractual assumption of development risk under a transaction in which the enterprises agree jointly to bear the costs of creating a new product ... Read more

Furthermore, in some cases, there may be more than one party to the transaction exercising control over a specific risk. Where the associated enterprise assuming risk (as analysed under step 4(i)) controls that risk in accordance with the requirements set out in paragraphs 1.65 – 1.66, all that remains under step 4(ii) is to consider whether the enterprise has the financial capacity to assume the risk. If so, the fact that other associated enterprises also exercise control over the same risk does not affect the assumption of that risk by the first-mentioned enterprise, and step 5 need not be considered ... Read more

In some cases, the analysis under step 3 may indicate that there is more than one MNE that is capable of exercising control over a risk. However, control requires both capability and functional performance in order to exercise control over a risk. Therefore, if more than one party is capable of exercising control, but the entity contractually assuming risk (as analysed under step 4(i)) is the only party that actually exercises control through capability and functional performance, then the party contractually assuming the risk also controls the risk ... Read more

In the circumstances of Example 3, analysis under step 4(i) shows that the assumption of utilisation risk by Company A is consistent with its contractual arrangements with Company C, but under step 4(ii) it is determined that Company A does not control risks that it assumes associated with the investment in and exploitation of the asset. Company A has no decision-making function which allows it to control its risks by taking decisions that affect the outcomes of the risks. Under step 4(ii) the party assuming risk does not control that risk, and further consideration is required under step 5 ... Read more

If the circumstances of Example 2 remain the same except for the fact that, while the contract specifies that Company A assumes supply chain risks, Company B is not reimbursed by Company A when there was a failure to secure key components on time, the analysis under step 4(i) would show that contractual assumption of risk has not been followed in practice in regard to that supply chain risk, such that Company B in fact assumes the downside consequences of that risk. Based on the information provided in Example 2, Company B does not have any control over the supply chain risk, whereas Company A does exercise control. Therefore, the party assuming risk as analysed under step 4(i), does not under step 4(ii) exercise control over that risk, and further consideration is required under step 5 ... Read more

Under step 4(ii) it should be determined whether the party assuming the risk under the contract, taking into account whether the contractual terms have been applied in the conduct of the parties under step 4(i), controls the risk and has the financial capacity to assume the risk. If all the circumstances set out in Example 1 remain the same except for the fact that the contract between Company A and Company B allocates development risk to Company B, and if there is no evidence from the conduct of the parties under step 4(i) to suggest that the contractual allocation of risk is not being followed, then Company B contractually assumes development risk but the facts remain that Company B has no capability to evaluate the development risk and does not make decisions about Company A’s activities. Company B has no decision-making function which allows it to control the development risk by taking decisions that affect the outcomes of that risk ... Read more

Consider for example, a manufacturer, whose functional currency is US dollars, that sells goods to an associated distributor in another country, whose functional currency is euros, and the written contract states that the distributor assumes all exchange rate risks in relation to this controlled transaction. If, however, the price for the goods is charged by the manufacturer to the distributor over an extended period of time in euros, the currency of the distributor, then aspects of the written contractual terms do not reflect the actual commercial or financial relations between the parties. The assumption of risk in the transaction should be determined by the actual conduct of the parties in the context of the contractual terms, rather than by aspects of written contractual terms which are not in practice applied. The principle can be further illustrated by Example 7 in the Annex to Chapter VI, where there is an inconsistency between the contractual assumption of risk and the conduct of ... Read more

In line with the discussion in relation to contractual terms (see Section D.1.1), it should be considered under step 4(i) whether the parties’ conduct conforms to the assumption of risk contained in written contracts, or whether the contractual terms have not been followed or are incomplete. Where differences exist between contractual terms related to risk and the conduct of the parties which are economically significant and would be taken into account by third parties in pricing the transaction between them, the parties’ conduct in the context of the consistent contractual terms should generally be taken as the best evidence concerning the intention of the parties in relation to the assumption of risk ... Read more

The significance of step 4 will depend on the findings. In the circumstances of Examples 1 and above, the step may be straightforward. Where a party contractually assuming a risk applies that contractual assumption of risk in its conduct, and also both exercises control over the risk and has the financial capacity to assume the risk, then there is no further analysis required beyond step 4(i) and (ii) to determine risk assumption. Companies A and B in both examples fulfil the obligations reflected in the contracts and exercise control over the risks that they assume in the transaction, supported by financial capacity. As a result step 4(ii) is satisfied, there is no need to consider step 5, and the next step to consider is step 6 ... Read more

Carrying out steps 1-3 involves the gathering of information relating to the assumption and management of risks in the controlled transaction. The next step is to interpret the information resulting from steps 1-3 and to determine whether the contractual assumption of risk is consistent with the conduct of the parties and the other facts of the case by analysing (i) whether the associated enterprises follow the contractual terms under the principles of Section D.1.1; and (ii) whether the party assuming risk, as analysed under (i), exercises control over the risk and has the financial capacity to assume risk ... Read more

Company A has acquired ownership of a tangible asset and enters into contracts for the use of the asset with unrelated customers. Under step 1 utilisation of the tangible asset, that is the risk that there will be insufficient demand for the asset to cover the costs Company A has incurred, has been identified as an economically significant risk. Under step 2 it is established that Company A has a contract for the provision of services with another group company, Company C; the contract does not address the assumption of utilisation risk by the owner of the tangible asset, Company A. The functional analysis under step 3 provides evidence that another group company, Company B, decides that investment in the asset is appropriate in light of anticipated commercial opportunities identified and evaluated by Company B and its assessment of the asset’s anticipated useful life; Company B provides specifications for the asset and the unique features required to respond to the ... Read more

Company B manufactures products for Company A. Under step 1 capacity utilisation risk and supply chain risk have been identified as economically significant in this transaction, and under step 2 it has been established that under the contract Company A assumes these risks. The functional analysis under step 3 provides evidence that Company B built and equipped its plant to Company A’s specifications, that products are manufactured to technical requirements and designs provided by Company A, that volume levels are determined by Company A, and that Company A runs the supply chain, including the procurement of components and raw materials. Company A also performs regular quality checks of the manufacturing process. Company B builds the plant, employs and trains competent manufacturing personnel, and determines production scheduling based on volume levels determined by Company A. Although Company B has incurred fixed costs, it has no ability to manage the risk associated with the recovery of those costs through determining the production ... Read more

Company A seeks to pursue a development opportunity and hires a specialist company, Company B, to perform part of the research on its behalf. Under step 1 development risk has been identified as economically significant in this transaction, and under step 2 it has been established that under the contract Company A assumes development risk. The functional analysis under step 3 shows that Company A controls its development risk through exercising its capability and authority in making a number of relevant decisions about whether and how to take on the development risk. These include the decision to perform part of the development work itself, the decision to seek specialist input, the decision to hire the particular researcher, the decision of the type of research that should be carried out and objectives assigned to it, and the decision of the budget allocated to Company B. Company A has mitigated its risk by taking measures to outsource development activities to Company B ... Read more

In this step the functions in relation to risk of the associated enterprises that are parties to the transaction are analysed. The analysis provides information about how the associated enterprises operate in relation to the assumption and management of the specific, economically significant risks, and in particular about which enterprise or enterprises perform control functions and risk mitigation functions, which enterprise or enterprises encounter upside or downside consequences of risk outcomes, and which enterprise or enterprises have the financial capacity to assume the risk. This step is illustrated by the following examples and conclusions are drawn from these examples in subsequent paragraphs of Section D.1.2 ... Read more

The assumption of risk has a significant effect on determining arm’s length pricing between associated enterprises, and it should not be concluded that the pricing arrangements adopted in the contractual arrangements alone determine which party assumes risk. Therefore, one may not infer from the fact that the price paid between associated enterprises for goods or services is set at a particular level, or by reference to a particular margin, that risks are borne by those associated enterprises in a particular manner. For example, a manufacturer may claim to be protected from the risk of price fluctuation of raw material as a consequence of its being remunerated by another group company on a basis that takes account of its actual costs. The implication of the claim is that the other group company bears the risk. The form of remuneration cannot dictate inappropriate risk allocations. It is the determination of how the parties actually manage and control risks, as set out in ... Read more

However, it does not follow that every contractual exchange of potentially higher but riskier income for lower but less risky income between associated enterprises is automatically arm’s length. The rest of the steps set out in this section describe the information required to determine how the associated enterprises operate in relation to the assumption and management of risk leading to the accurate delineation of the actual transaction in relation to risk ... Read more

It is economically neutral to take on (or lay off) risk in return for higher (or lower) anticipated nominal income as long as the net present value of both options are equal. Between unrelated parties, for example, the sale of a risky income-producing asset may reflect in part a preference of the seller to accept a lower but more certain amount of nominal income and to forego the possibility of higher anticipated nominal income it might earn if it instead retained and exploited the asset. In a without-recourse debt factoring arrangement between independent enterprises, for example, the seller discounts the face value of its receivables in return for a fixed payment, and so accepts a lower return but has reduced its volatility and laid off risk. The factor will often be a specialised organisation which has the capability to decide to take on risk and to decide on how to respond to the risk, including by diversifying the risk and ... Read more

A contractual assumption of risk constitutes an ex ante agreement to bear some or all of the potential costs associated with the ex post materialisation of downside outcomes of risk in return for some or all of the potential benefit associated with the ex post materialisation of positive outcomes. Importantly, ex ante contractual assumption of risk should provide clear evidence of a commitment to assume risk prior to the materialisation of risk outcomes. Such evidence is a very important part of the tax administration’s transfer pricing analysis of risks in commercial or financial relations, since, in practice, an audit performed by the tax administration may occur years after the making of such up-front decisions by the associated enterprises and when outcomes are known. The purported assumption of risk by associated enterprises when risk outcomes are certain is by definition not an assumption of risk, since there is no longer any risk. Similarly, ex post reallocations of risk by a tax ... Read more

The identity of the party or parties assuming risks may be set out in written contracts between the parties to a transaction involving these risks. A written contract typically sets out an intended assumption of risk by the parties. Some risks may be explicitly assumed in the contractual arrangements. For example, a distributor might contractually assume accounts receivable risk, inventory risk, and credit risks associated with the distributor’s sales to unrelated customers. Other risks might be implicitly assumed. For example, contractual arrangements that provide non- contingent remuneration for one of the parties implicitly allocate the outcome of some risks, including unanticipated profits or losses, to the other party ... Read more

Control over a specific risk in a transaction focusses on the decision-making of the parties to the transaction in relation to the specific risk arising from the transaction. This is not to say, however, that in an MNE group other parties may not be involved in setting general policies that are relevant for the assumption and control of the specific risks identified in a transaction, without such policy-setting itself representing decision making. The board and executive committees of the group, for example, may set the level of risk the group as a whole is prepared to accept in order to achieve commercial objectives, and to establish the control framework for managing and reporting risk in its operations. Line management in business segments, operational entities, and functional departments may identify and assess risk against the commercial opportunities, and put in place appropriate controls and processes to address risk and influence the risk outcomes arising from day-to-day operations. The opportunities pursued by ... Read more

In the second situation, a multinational toy retailer buys a wide range of products from a number of third-party manufacturers. Most of its sales are concentrated in the last two months of the calendar year, and a significant risk relates to the strategic direction of the buying function, and in making the right bets on trends and determining the products that will sell and in what volumes. Trends and the demand for products can vary across markets, and so expertise is needed to evaluate the right bets in the local market. The effect of the buying risk can be magnified if the retailer negotiates a period of exclusivity for a particular product with the third- party manufacturer ... Read more

In the first situation the MNE group distributes heating oil to consumers. Analysis of the economically relevant characteristics establishes that the product is undifferentiated, the market is competitive, the market size is predictable, and players are price-takers. In such circumstances, the ability to influence margins may be limited. The credit terms achieved from managing the relationship with the oil suppliers fund working capital and are crucial to the distributor’s margin. The impact of the risk on cost of capital is, therefore, significant in the context of how value is created for the distribution function ... Read more

Determining the economic significance of risk and how risk may affect the pricing of a transaction between associated enterprises is part of the broader functional analysis of how value is created by the MNE group, the activities that allow the MNE group to sustain profits, and the economically relevant characteristics of the transaction. The analysis of risk also helps to determine comparability under the guidance in Chapter III. Where potential comparables are identified, it is relevant to determine whether they include the same level of risks and management of risks. The economic significance of risk may be illustrated by the following two situations ... Read more

Risks can be categorised in various ways, but a relevant framework in a transfer pricing analysis is to consider the sources of uncertainty which give rise to risk. The following non-exclusive list of sources of risk is not intended to suggest a hierarchy of risk. Neither is it intended to provide rigid categories of risk, since there is overlap between the categories. Instead, it is intended to provide a framework that may assist in ensuring that a transfer pricing analysis considers the range of risks likely to arise from the commercial or financial relations of the associated enterprises, and from the context in which those relations take place. Reference is made to risks that are externally driven and those that are internally driven in order to help clarify sources of uncertainty. However, there should be no inference that externally driven risks are less relevant because they are not generated directly by activities. On the contrary, the ability of a company ... Read more

There are many definitions of risk, but in a transfer pricing context it is appropriate to consider risk as the effect of uncertainty on the objectives of the business. In all of a company’s operations, every step taken to exploit opportunities, every time a company spends money or generates income, uncertainty exists, and risk is assumed. A company is likely to direct much attention to identifying uncertainties it encounters, in evaluating whether and how business opportunities should be pursued in view of their inherent risks, and in developing appropriate risk mitigation strategies which are important to shareholders seeking their required rate of return. Risk is associated with opportunities, and does not have downside connotations alone; it is inherent in commercial activity, and companies choose which risks they wish to assume in order to have the opportunity to generate profits. No profit- seeking business takes on risk associated with commercial opportunities without expecting a positive return. Downside impact of risk occurs ... Read more

Assume that an investor hires a fund manager to invest funds on its account. Depending on the agreement between the investor and the fund manager, the latter may be given the authority to make portfolio investments on behalf of the investor on a day-to-day basis in a way that reflects the risk preferences of the investor, although the risk of loss in value of the investment would be borne by the investor. In such an example, the investor is controlling its risks through four relevant decisions: the decision about its risk preference and therefore about the required diversification of the risks attached to the different investments that are part of the portfolio, the decision to hire (or terminate the contract with) that particular fund manager, the decision of the extent of the authority it gives to the fund manager and objectives it assigns to the latter, and the decision of the amount of the investment that it asks this fund ... Read more

The concept of control may be illustrated by the following examples. Company A appoints a specialist manufacturer, Company B to manufacture products on its behalf. The contractual arrangements indicate that Company B undertakes to perform manufacturing services, but that the product specifications and designs are provided by Company A, and that Company A determines production scheduling, including the volumes and timing of product delivery. The contractual relations imply that Company A bears the inventory risk and the product recall risk. Company A hires Company C to perform regular quality controls of the production process. Company A specifies the objectives of the quality control audits and the information that Company C should gather on its behalf. Company C reports directly to Company A. Analysis of the economically relevant characteristics shows that Company A controls its product recall and inventory risks by exercising its capability and authority to make a number of relevant decisions about whether and how to take on risk ... Read more

Risk mitigation refers to measures taken that are expected to affect risk outcomes. Such measures may include measures that reduce the uncertainty or measures that reduce the consequences in the event that the downside impact of risk occurs. Control should not be interpreted as requiring risk mitigation measures to be adopted, since in assessing risks businesses may decide that the uncertainty associated with some risks, including risks that may be fundamental to their core business operations, after being evaluated, should be taken on and faced in order to create and maximise opportunities ... Read more

References to control over risk should not necessarily be taken to mean that the risk itself can be influenced or that the uncertainty can be nullified. Some risks cannot be influenced, and are a general condition of commercial activity affecting all businesses undertaking that activity. For example, risks associated with general economic conditions or commodity price cycles are typically beyond the scope of an MNE group to influence. Instead control over risk should be understood as the capability and authority to decide to take on the risk, and to decide whether and how to respond to the risk, for example through the timing of investments, the nature of development programmes, the design of marketing strategies, or the setting of production levels ... Read more

The capability to perform decision-making functions and the actual performance of such decision-making functions relating to a specific risk involve an understanding of the risk based on a relevant analysis of the information required for assessing the foreseeable downside and upside risk outcomes of such a decision and the consequences for the business of the enterprise. Decision-makers should possess competence and experience in the area of the particular risk for which the decision is being made and possess an understanding of the impact of their decision on the business. They should also have access to the relevant information, either by gathering this information themselves or by exercising authority to specify and obtain the relevant information to support the decision-making process. In doing so, they require capability to determine the objectives of the gathering and analysis of the information, to hire the party gathering the information and making the analyses, to assess whether the right information is gathered and the analyses ... Read more

Control over risk involves the first two elements of risk management defined in paragraph 1.61; that is (i) the capability to make decisions to take on, lay off, or decline a risk-bearing opportunity, together with the actual performance of that decision-making function and (ii) the capability to make decisions on whether and how to respond to the risks associated with the opportunity, together with the actual performance of that decision-making function. It is not necessary for a party to perform the day-to-day mitigation, as described in (iii) in order to have control of the risks. Such day-to-day mitigation may be outsourced, as the example in paragraph 1.63 illustrates. However, where these day-to-day mitigation activities are outsourced, control of the risk would require capability to determine the objectives of the outsourced activities, to decide to hire the provider of the risk mitigation functions, to assess whether the objectives are being adequately met, and, where necessary, to decide to adapt or terminate ... Read more