for identifying, managing and monitoring operational, financial, regulatory and compliance risks;

for identifying, managing and monitoring risks in respect of the soundness of the design of the scheme;

for recording and documenting risks in an appropriate and durable format;

for ensuring that risks are managed in a timely manner by persons with the appropriate skills, knowledge and resources;

for informing the trustees about risks that have arisen and the steps being taken to manage them.