CUSTODIAL AND TRUST OPERATIONS

PT BANK MANDIRI PERSERO Tbk. AND SUBSIDIARIES NOTES TO THE CONSOLIDATED FINANCIAL STATEMENTS 31 DECEMBER 2009, 2008 AND 2007 Expressed in millions of Rupiah, unless otherwise stated Appendix 5135 56. RISK MANAGEMENT continued In operational activities, the Risk Management Directorate is divided into 2 two main functions: 1 Risk management unit as a part of Credit Approval using a four-eye principle, and 2 Independent Risk Management Unit which is divided into two groups; Credit Risk Policy Group who manage credit risk and portfolio risk, and Market Operational Risk Group who manage operational risk, market risk and liquidity risk. The Risk Management Directorate and each strategic business unit are responsible for maintaining and coordinating overall risks that consist of credit risk, market risk, operational risk, liquidity risk, legal risk, reputation risk, strategic risk and compliance risk including establishing risk management policies and standards. All risks will be disclosed in a quarterly risk profile report to portrait all risks embedded in the Bank’s business activities, including consolidation with subsidiaries’ risk. Credit Risk The Bank’s credit risk management is mainly directed to improving the balance between prudent loan expansion and loan maintenance in order to prevent asset deterioration downgrading to Non Performing Loan NPL categories and to optimise capital utilisation to achieve optimum Risk Adjusted Return On Capital RAROC. To support this purpose, the Bank periodically reviews and updates its policies and procedures i.e. Bank Mandiri Credit Policy KPBM, Standard Credit Procedures SPK for each business segment, and Memorandum Procedure which is temporary in nature and issued to regulate the procedures which have not been accommodated in SPK. These three policies and procedures are intended to provide a comprehensive credit risk management guideline for identification, measurement and mitigation of credit risks in the end-to-end loan granting process, from market targeting, loan analysis, approval, documentation, disbursement, monitoring and settlement process for troubled loansrestructuring. To improve the Bank’s social role and concern to the environmental risk and as an implementation of Good Corporate Governance GCG, the Bank has set up a Guideline for Technical Analysis of Environmental and Social in Lending which is used as a reference in analysing environmental risk in a credit analysis. The Guideline codifies internal credit policy and procedure related to environmental issues which are also included in KPBM, SPK and Standard Operating Procedures. This Guideline is in line with Bank Indonesia regulation regarding Assessing the Quality of Asset on General Bank regulating that the Debtor business process should be also related with the debtor’s effort to maintain its environment. In principle, credit risk management is implemented at both the transactional and portfolio levels. At the transactional level, the Bank has implemented the four-eye principle concept, whereby each loan approval involves Business Unit and Credit Risk Management Unit which work independently to make an objective credit decision. The four-eye principle is executed by Credit Committee according to the authority limit and the loan approval process is conducted through Credit Committee Meeting mechanism. As Credit Committee members, the credit authority holders must be highly competent as well as having strong capacity and integrity so that the loan granting process can be conducted comprehensively and prudently. To monitor the performance of the credit authority holders in approving and maintaining loans, the Bank has developed a database for authority-holder monitoring. By using this system, the Bank can monitor the amount and quality of the loans approved by the credit authority holders, so that the performance of the authority holders can be monitored from time to time. PT BANK MANDIRI PERSERO Tbk. AND SUBSIDIARIES NOTES TO THE CONSOLIDATED FINANCIAL STATEMENTS 31 DECEMBER 2009, 2008 AND 2007 Expressed in millions of Rupiah, unless otherwise stated Appendix 5136 56. RISK MANAGEMENT continued Credit Risk continued To identify and measure risk of each credit application processed in the transactional level, the Bank uses Rating and Scoring systems. The Rating and Scoring systems consist of Bank Mandiri Rating System BMRS, Small Medium Enterprise Scoring System SMESS, Micro Banking Scoring System MBSS and Consumer Scoring System. The Bank has also developed a Rating System for Financial InstitutionsBanks, called Bank Mandiri Financial Institution Rating BMFIR, so that the Bank, in granting Credit Line facilities, can identify and measure the risk level of Counterparty Bank which can be tolerated. To support the development of these tools, the Bank has issued Guideline for the Development of Credit Rating and Credit Scoring Models, which serves as a complete reference for the Bank in developing credit rating and credit scoring models. In addition, to monitor the performance of credit rating and credit scoring models, the Bank reviews the scoring and rating results conducted by Business Units. By reviewing and monitoring the rating models using validation methodology, the Bank can understand the performance of the models from time to time. At the moment, the model validation is conducted internally by Model Risk Validation unit, which is an independent unit and separated from the model development unit. This is conducted to minimise user’s mistake in measuring credit risk, particularly in determining the Probability of Default PD value and debtors’ rating. In both measuring economic capital for credit risk and complying to Basel II, the Bank has been developing Long Term PD and also reviewing Exposure at Default EAD Lost Given Default LGD model internally. In order to monitor rating scoring gathered in the database, the Bank prepares Credit Scoring Review and Rating Outlook which are issued quarterly and semi-annually. The reports contain information concerning scoring and rating parameters presented by industrial sector. The reports are useful for Business Units particularly as a reference in determining targeted customer which are good performing, so that the quality of credit expansion process will improve. As an implementation of prudential banking practice for identifying, measuring and monitoring credit risk in the loan approval process, the Bank uses not only Rating and Scoring tools but also uses other tools such as financial spread sheet, Comprehensive Credit Note Analysis NAK and Loan Monitoring System which have been integrated to Integrated Loan Processing ILPLoan Origination System LOS to cover the end-to-end loan process. To mitigate credit risk per individual debtor, the Credit Committee makes decision in credit structure including determining the appropriate credit covenants relevant to the needs and conditions of the debtor, so that the loan granted will be effective and profitable for both the debtor and the Bank. In response to the global economic crisis which has not ended yet, to identify debtors which may experience difficulty in repaying their loan obligation, the Bank conducts early warning analysis called Watch List analysis for all Corporate and Commercial loans using Loan Monitoring System. Based on the analysis, the Bank should determine account strategy and early actions to prevent NPL. At the portfolio level, risk management is conducted through an active portfolio management approach in which the Bank proactively maintains portfolio diversification at optimum levels with risk exposure within the risk appetite level decided by the Bank. In its implementation, the Bank uses several tools called Portfolio Guideline PG. PG consists of three items i.e. Industry Classification, Industry Acceptance Criteria and Industry Limit. Industry Classification IC classifies industrial sectors into three categories based on the prospects and risks of the corresponding industry. The Bank uses IC in determining the industry target market. The second tool is Industry Acceptance Criteria IAC which gives basic criteria quantitative and qualitative which serves as key success factors in certain industrial sector. The Bank uses IAC in determining targeted customer. The third tool is Industry Limit IL which provides maximum exposure limit which can be given to a particular industrial sector.