DIGI - Annual Report 2021

REVIEW OF THIS STATEMENT BY EXTERNAL AUDITORS The external auditors have performed limited assurance procedures on this Statement on Risk Management and Internal Control pursuant to the scope set out in Audit and Assurance Practice Guide 3 (AAPG 3), Guidance for Auditors on Engagements to Report on the Statement on Risk Management and Internal Control included in the Annual Report issued by the Malaysian Institute of Accountants for inclusion in the Annual Report of the Group for the financial year ended 31 December 2021, and reported to the Board that nothing has come to their attention that cause them to believe the statement intended to be included in the Annual Report is not prepared, in all material respects, in accordance with the disclosures required by paragraphs 41 and 42 of the Statement on Risk Management and Internal Control: Guidelines, nor is the Statement factually inaccurate. AAPG 3 does not require the external auditors to consider whether the Directors’ Statement on Risk Management and Internal Control covers all risks and controls, or to form an opinion on the adequacy and effectiveness of the Group’s risk management and internal control system including the assessment and opinion by the Directors and Management thereon. The report from the external auditors was made solely for and directed solely to the Board of Directors in connection with their compliance with the listing requirements of Bursa Malaysia and for no other purposes or parties. The external auditors do not assume responsibility to any person other than the Board of Directors in respect of any aspect of this report. Statement on Risk Management and Internal Control CONCLUSION The Board has received assurance from the CEO and CFO that Digi’s risk management and internal control framework is operating adequately and effectively, in all material aspects, during the financial year under review and up to the date of this Statement. Taking into consideration the assurance from Management and relevant assurance providers, the Board is of the view that the risk management and internal control practices and processes are operating adequately and effectively to safeguard the stakeholders’ interests, shareholders’ investment, customer’s interests,and Digi’s assets. 125 Integrated Annual Report 2021 Governance Audited Financial Statements Other Information

RkJQdWJsaXNoZXIy ODU0MjU5