
OUR APPROACH
TO COMPLIANCE
Discovery is committed to adhering to
all applicable legal and regulatory
requirements, the highest professional and
ethical standards, and our stated values. We
believe a strong compliance culture is a key
aspect of industry leadership and is vital to
securing sustainable and profitable growth.
The Group is subject to detailed laws and
regulations in each of the jurisdictions in
which it operates. Our business activities
are governed by various regulatory and
supervisory authorities to ensure we act in
accordance with stipulated regulatory
frameworks. Our robust compliance culture
supports our operations in these complex
regulatory environments.
We integrate a strong compliance culture
in our daily business activities and strategic
planning. In this way, we ensure that
compliant conduct forms an integral part of
everyday behaviour and decision-making.
This protects Discovery’s reputation,
minimises the risk of regulatory action,
contributes to our growth, and provides
appropriate protection to our clients.
In FY2025, Discovery did not receive any
regulatory enforcement action, nor were we
subject to any compliance inspections that
resulted in any penalties, sanctions, or fines.
THE GROUP COMPLIANCE
FUNCTION
Compliance functions ensure the Group’s
Compliance Framework is appropriately
designed and implemented. They provide
the Board, relevant Board committees,
executive management and regulators with
reasonable and independent assurance that
an effective compliance culture and
Compliance Framework is embedded across
the Group.
The Group adopts a federated approach to
compliance, recognising that the nature,
scale and complexity of our operations
THE ROLE OF THE
GROUP INTERNAL
AUDIT FUNCTION
Our Group Internal Audit function, together
with other assurance providers, provides
assurance of the Group’s significant risks and
material matters, and incorporates applicable
legislation in its reviews. Group Internal Audit
is also responsible for conducting regular
reviews of the effectiveness of the combined
assurance process across Discovery.
The function is structured to support the
Group across the primary jurisdictions in
which we operate. A centralised internal audit
team provides assurance across Discovery’s
South African businesses and Vitality Global
– except Discovery Bank, which has its own
Internal Audit function. Our UK businesses
are supported by a dedicated Internal Audit
function in their jurisdiction. Given the nature,
scale and complexity of operations, these
functions are best placed to address the
assurance requirements and challenges
within their jurisdictions, financial sectors
and businesses.
Appropriate policies and processes are in
place to ensure the independence of the
internal auditors. The Chief Audit Executive has
a functional reporting line and direct access to
the relevant Audit Committee Chairperson and
an administrative reporting line to the Group
CFO. Regular closed sessions are held with the
Audit Committee Chairpersons during the year,
without management, on any matter that is
regarded as relevant to fulfilling the Audit
Committees’ responsibilities. Each established
Audit Committee has the responsibility to:
Review and approve the annual Group
internal audit plan, significant focus areas,
and resources and budget
Review and approve the Group’s Internal
Audit Charter and evaluate the
independence, effectiveness, and
performance of the function in line with
its charter
require a tailored approach within each
primary jurisdiction in which we operate.
To reinforce governance, Discovery has
established dedicated compliance functions
as part of the Group’s second line of defence.
Local compliance functions are optimally
positioned to assess requirements and
address unique challenges relevant to their
regions, financial sectors and businesses.
They promote a culture that integrates
compliance throughout all entities, and
report directly to their respective boards
through relevant board committees.
In South Africa, a centralised compliance
team supports Discovery’s operations except
for Discovery Bank, which has its own
compliance team. Compliance functions
report to the Board through its Group
andSouth Africa composite’s Risk and
Compliance committees and Social and
Ethics Committee and are an integral part
ofthe Board-approved enterprise risk
management strategy. Each function consists
of skilled and experienced professionals
whooperate independently from day-to-day
business activities. These include Compliance
Officers and Control Function Heads who
arerequired to be appointed in terms of
applicable legislation.
Our international businesses are supported
by dedicated compliance teams in their
respective jurisdictions. The Group Controlling
Company’s Compliance Control Function
focuses on ensuring compliance with all
applicable legislation and statutory obligations
at a Group level and ensures the Board has
aGroup-wide view of compliance matters.
The Controlling Company’s Compliance
Control Function also facilitates the timely
and accurate flow of information related to
material matters and supports the effective
management thereof across the Group.
The Group Compliance function performed
an annual effectiveness review and is
satisfied that it fulfilled its responsibilities for
FY2025. In addition, Group Internal Audit
undertook an audit of the function and
assigned a rating of ‘High Assurance’.
Our future focus areas
Financial Advisory and Intermediary Services (FAIS) Centre of Excellence
Group Compliance: SA launched a FAIS centre of excellence (CoE) during
the year. The FAIS CoE is a central hub for all FAIS-related activities in the
Discovery SA composite, providing compliance services, training
programmes, regulatory guidance and a robust complaints oversight
framework. Through the FAIS CoE, we will continue to enhance
compliance support for representatives.
Vulnerable customers
Discovery established a Vulnerable Customer Working Group, and we
continue to review our approach to vulnerable customers and expanding
our well-embedded Treating Customers Fairly Framework to meet any
additional regulatory requirements.
Continuous monitoring to deepen assurance
We are committed to ensuring compliance with applicable laws and
adopted non-binding rules, codes and standards, and maintain
collaborative working relationships with Discovery’s regulators.
We did not receive enforcement action during FY2025. Discovery Life
Limited and Discovery Bank Limited were subjected to an inspection
interms of section 45B of the Financial Intelligence Centre Act, No. 38
of2001.
We work to continuously enhance our risk-based monitoring framework
to increase our focus in areas that pose the greatest risk to the business
and carry potential significant implications of non-compliance. We
continue to deepen our engagements with Discovery’s other assurance
providers to strengthen our Combined Assurance model.
Enhancing our financial crime governance and control environment
We will continue focusing on preventing financial crimes through risk-
based due diligence and assurance engagements. By using technologies
like AI and machine learning, we aim to enhance our financial crime
compliance framework and further automate due diligence processes
relating to beneficial ownership transparency for policyholders and other
applicable legal entities counterparties.
We have an anti-money laundering (AML), counterterrorism financing
(CTF) and counterproliferation financing (CPF) operational Centre of
Excellence (Financial Crime CoE) for all South African accountable and
reporting institutions to drive efficiencies, enhance a Group-wide
approach to compliance and to create a single view of our clients.
DISCOVERY
GOVERNANCE REPORT 2025
22
Refer to page 28 for more information on our Risk and Compliance Committee.
Refer to page 26 for more information on our
Audit Committee.
Our governance philosophy
and framework
Delivering good
performance
Maintaining an ethical
culture
FY2025 King IVTM
application register
Ensuring effective control