Company: RTNTF
Filing Date: 2025-02-20
Form Type: 20-F
Source: 0001628280-25-006642
Chunk: 178

Company: RIO TINTO LTD
Filing Date: 2025-02-20
Form: 20-F
Chunk 178
---
 is developed with input from our leadership, approved by the Board, and is used throughout our Risk Management Process. This integration ensures we are effectively managing threats and opportunities to our business and host communities, as well as protecting nature. Our risk management process

| Set strategy,objectives and riskappetite |     | Perform riskassessmentIdentify and evaluaterisks to strategy andobjectives. |     | Perform riskmanagementImplement controlsand actions tomanage risks withinrisk appetite. |     | Perform riskassuranceCheck and verify thatcontrols and actionsare effective inmanaging risks.Identify, prioritiseand implementimprovements. |     | Communicate riskinsightsCommunicate currentand emerging riskexposure to informdecisions. |     | Improve andembed riskmanagementBuild risk capabilityand culture so activemanagement isembedded in how werun our business. |
| Plan                                     |     |                                                                             |     | Do                                                                                      |     | Check                                                                                                                                       |     | Act                                                                                      |     |                                                                                                                           |

Our risk management process follows international standards and operates as a Plan-Do-Check-Act cycle. This provides a systematic yet flexible approach to respond to the dynamic business environment we operate in. When identifying and assessing risk, we take into account both financial and non-financial impacts on our business, the environment and communities where we operate. We assess the materiality of each risk, enabling us to escalate when necessary and prioritise resources where they are most needed. We actively monitor how well we manage risks that are material to our objectives by verifying that the design of our response (actions and controls) remains resilient to changing conditions, and by checking the implementation of the response against our actual performance. We enhance the check- and-verify step by applying the 3 lines of defence approach, which remains a core part of our risk management framework. We look to continually improve and strengthen our risk culture and framework through enhancing processes, tools and training. We use an enterprise-wide risk management information system (RMIS) with integrated tools and applications to capture, manage and communicate material business risks. These tools support decision making and prioritisation through transparent, up-to-date data.

| Annual Report on Form 20-F 2024 | 89 | riotinto.com |

Strategic report | Our approach to risk management

Our risk managemen t governance structure Our risk management framework is structured to assign accountability for risks to leaders who are in the best position to address them, while offering support via Centres of Excellence (CoE) and