enablingpic
Risk Management
Enabling a
Risk-Intelligent
Enterprise
At LTM, effective risk management is fundamental to building a resilient, future-ready enterprise. Our Enterprise Risk Management (ERM) framework is aligned with ISO 31000 guidelines, industry best practices, and globally recognized standards. It enables us to proactively identify, assess, and manage risks, including emerging risks, while strengthening our ability to navigate uncertainty and seize new opportunities.

By embedding risk-intelligent decision-making across our operations and integrating technologyenabled insights, we strive to anticipate challenges, strengthen organizational resilience, and enable confident, informed decision-making. This approach fosters a strong risk-aware culture and empowers our teams to outcreate sustainable value while safeguarding the interests of our stakeholders.

Awards & Recognition

Our commitment to strengthening enterprise resilience and governance continues to be recognized globally. During the year, we were honored with the Golden Peacock Award for Risk Management (GPARM) 2025 by the Institute of Directors (IOD), one of the most respected global recognitions for enterprise risk excellence.

This achievement reflects the dedication of our teams, who continue to strengthen our risk culture and reinforce our ability to build a resilient, adaptive, and future-ready organization.

Enterprise Risk Management (ERM)

Enterprise Risk Management remains a cornerstone of our governance framework, enabling proactive identification, analysis, evaluation, treatment, and monitoring of risks that may affect the achievement of our strategic objectives. Aligned with our AI-led vision, we increasingly leverage intelligent technologies to strengthen risk monitoring and decision-making across the enterprise. These capabilities provide timely, data-driven insights that enhance operational efficiency, strengthen oversight, and improve our ability to anticipate evolving risks.

Through this integrated approach, we continue to build a resilient organization capable of responding to dynamic business environments while enabling our teams to responsibly innovate and outcreate new opportunities for growth.

Our Risk Universe

At LTM, we classify enterprise risks into seven principal categories: Strategic, Financial, Operational, Information Technology, Compliance, Reputation & Environment, to ensure comprehensive risk coverage and structured oversight across the organization.

This structured risk universe enables us to evaluate risks holistically, align mitigation strategies with business priorities, and strengthen enterprise resilience.

To read more about the ERM framework and responsible board committees, refer to Management Discussion and Analysis &
Risk Management Report of the Statutory Reports

Strategic
Financial
Operational
Technology
Compliance
Reputation
Environment

Enterprise Risks and their Mitigation

Attrition

High attrition may disrupt business operations, and affect timely, quality delivery, potentially leading to client dissatisfaction. It may also increase operational costs and lead to knowledge loss.

Risk Treatment Approach

  • We focus on strengthening the entire talent lifecycle, enhancing engagement initiatives, and implementing a hybrid operating model that balances client expectations with employee preferences.
  • Our initiatives include structured career paths, holistic recognition programs, targeted upskilling, and leadership development programs that enable continuous professional growth.
  • By fostering a flexible and inclusive workplace, we aim to create an environment where our people can thrive, innovate, and outcreate value for our clients.
Capitals Affected F I H S
Artificial Intelligence

Generative AI (GenAI) is reshaping the software development ecosystem and presents significant opportunities for innovation.

However, if not deployed responsibly, it may expose organizations to risks such as data breaches, bias and fairness concerns, regulatory violations, contractual non-compliances, breach of intellectual property, and financial exposure.

Risk Treatment Approach

We continue to strengthen our AI capabilities while ensuring responsible governance and adoption.

Our approach includes

  • Expanding AI adoption across client engagements and monitoring implementation across projects
  • Implementing an AI Maturity framework to track productivity gains and business impact
  • Strengthening our position as a recognized leader in AI innovation
  • Developing internal AI platforms and systems to enhance our capabilities
  • Upskilling our workforce through structured AI learning programs
  • Establishing structured governance frameworks to ensure regulatory compliance and responsible AI deployment

Through these initiatives, we aim to harness AI responsibly and outcreate new value for our clients and stakeholders.

Capitals Affected F I H S N
Data Privacy and Compliance

Failure to comply with data privacy regulations or incidents of data breaches can result in financial penalties, legal exposure, and reputational damage. Such incidents can erode customer trust, disrupt operations, and lead to increased regulatory scrutiny.

Risk Treatment Approach

  • We maintain a robust data‑privacy framework supported by strong policies, controls, and continuous monitoring of the evolving regulatory requirements.
  • Our efforts include strengthening organizational awareness through targeted training programs customized to regional requirements.
  • We ensure effective oversight through a robust governance structure supported by executive leadership and Board review.
Capitals Affected F H S N
Information Security

Cybersecurity threats, including external attacks, malware, compromised credentials, and phishing incidents, pose a risk of data loss, operational disruption, and reputational damage.

An inadequate security posture across people, processes, and technology further increases vulnerability, impacting client trust and confidence.

Risk Treatment Approach

  • We continue to strengthen our cybersecurity posture through structured assessment programs aligned with global cybersecurity frameworks and best practices.
  • Our initiatives include evaluating and strengthening security posture across internal and external environments, achieving benchmark security scores, and ensuring mandatory cybersecurity awareness training across the organization.

These measures reinforce our commitment to safeguarding client data and maintaining trust.

Capitals Affected F S N
Macroeconomic and Geopolitical Environment

Economic volatility, geopolitical instability, and political developments, including trade restrictions, tariffs, sanctions, and conflicts, may adversely affect business operations, supply chains, and revenue growth.

Risk Treatment Approach

  • We closely monitor geopolitical and macroeconomic developments, and assess their potential business implications.
  • Our mitigation measures include building operational agility, strengthening local talent acquisition, expanding nearshore and regional delivery centers, and implementing strong crisis management and business continuity protocols in affected regions.
  • We also focus on diversifying supply chains to address potential disruptions and deepening our global presence to ensure a balanced and diversified business footprint.
Capitals Affected F I H S N
Large Deal Execution

Large and strategic deals involve complex requirements, tight deadlines, and high customer expectations. Failure to meet project commitments or manage costs effectively could result in financial penalties, loss of client trust, and permanent reputational damage.

Risk Treatment Approach

  • We strengthen governance through the implementation of our Pursuit Assurance Framework across large and strategic deals to ensure robust oversight and risk management.
  • Through disciplined planning, strong financial monitoring, and adherence to contractual commitments, we aim to deliver consistent outcomes while maintaining healthy margins and reinforcing long-term client relationships.
Capitals Affected F I H
Large Accounts

A significant portion of our revenue is derived from a concentrated group of key clients. This concentration may expose the Company to potential revenue volatility in the event of unforeseen client-specific circumstances.

Risk Treatment Approach

  • We focus on diversifying our revenue profile by expanding our customer base across geographies and strengthening engagement with emerging accounts.
  • Our strategy includes scaling strategic client relationships, expanding Tier-2 accounts, and building a balanced revenue pyramid to enhance resilience and long-term growth.
Capitals Affected F I H
Cost Reduction Program

Inadequate budget planning, rising resource costs, and inflationary pressures may lead to significant cost overruns and operational inefficiencies.

Risk Treatment Approach

  • We pursue disciplined cost management through both indirect and direct cost optimization measures.
  • Indirect initiatives focus on improving operational efficiency across delivery, talent management, sales, and marketing processes.
  • Direct initiatives involve strengthening financial governance through monitoring key parameters such as project margins, Fixed Price Projects rate revisions, and workforce pyramid optimization.
Capitals Affected F I H
Fraud Governance

Fraudulent activities may lead to financial losses, reputational damage, and erosion of stakeholder trust.

Risk Treatment Approach

  • We continue to strengthen fraud prevention controls across the organization while reinforcing transparent whistleblower policies and reporting mechanisms. These enable associates, vendors, and clients to report concerns while maintaining confidentiality.
  • Through stronger governance mechanisms, prompt investigation processes, and regular awareness programs, we strive to outperform the highest standards of integrity and ethical conduct.
Capitals Affected F H S
Crisis Management

In a BANI (Brittle, Anxious, Non-linear, Incomprehensible) environment, organizations must be prepared to respond effectively to crises that may affect employee safety and business continuity.

Risk Treatment Approach

  • We leverage advanced technology platforms to monitor global threats, assess risks in real-time, and communicate effectively with our teams.
  • Location-specific Crisis Management Teams operate across all LTM facilities, supported by regular simulation exercises to strengthen readiness and improve overall organizational resilience.
Capitals Affected F H S N
ESG

Environment

Failure to achieve targeted GHG emission reductions, water conservation goals, or effective waste management may affect the Company’s sustainability rating and brand value.

Risk Treatment Approach

  • We continue to improve our energy and emission performance through efficient infrastructure of lighting, HVAC systems, and renewable energy adoption.
  • We inculcate improved water management practices by maximizing recycled water and enhancing rainwater harvesting, alongside an external conservation project.
  • We aim for zero waste sent to landfill by minimizing the use of new raw materials and implementing waste processing units.
  • These initiatives support our long-term sustainability commitments while enabling us to responsibly outcreate solutions that balance growth with environmental stewardship.

Social

Limited progress in community development initiatives or diversity and inclusion could affect innovation, teamwork, and workplace culture, potentially impacting business performance.

Risk Treatment Approach

  • We focus on strengthening community impact through wellgoverned programs supported by measurable KPIs, strong governance, regular audits, social‑impact assessments, and grievance mechanisms.
  • We continue to advance inclusion and diversity representation (Gender, PwD, LGBTQ+, veterans, ethnicity/nationality) through inclusive hiring practices, awareness programs, and structured career development initiatives while ensuring safe, accessible, and supportive workspaces.

Governance

Failure to maintain transparency in ESG reporting or respond to regulatory requirements may result in compliance risks and reputational impact.

Risk Treatment Approach

  • We continue to strengthen governance transparency through robust ESG disclosures, improved reporting processes and disclosures, and enhanced engagement with rating agencies and stakeholders.
  • We also support a sustainable value chain by enabling suppliers to adopt responsible business practices aligned with BRSR reporting frameworks.
Capitals Affected F H S N
  • F Financial Capital
  • I Intellectual Capital
  • M Manufactured Capital
  • H Human Capital
  • S Social and Relationship Capital
  • N Natural Capital