Aurelia Healthcare — Risk Management & Mitigation
The risk universe and heat map, the top-10 principal risks register, the risk-category deep-dives, and the sensitivity and scenario analysis.
Section 11 · Business Plan
Risk Management & Mitigation
The risk universe and heat map, the top-10 principal risks register, the risk-category deep-dives, and the sensitivity and scenario analysis.
The Aurelia platform has been structured from inception around a
comprehensive enterprise risk management (ERM) framework aligned to the
ISO 31000:2018 standard and the Combined Assurance Model articulated in
King IV. The Group Audit & Risk Committee, chaired by an independent
non-executive director with healthcare-financial expertise, oversees the
framework. Operational risk ownership is decentralised to facility
General Managers, with second-line oversight from a dedicated Group Risk
& Compliance function and third-line independent assurance from
internal audit (Big-4 outsourced) and the External Auditor.
11.1 Risk Universe & Heat Map
Fifteen principal risks have been identified across six categories —
strategic, regulatory & policy, operational & clinical,
financial & funding, market & competitive, and exogenous
(macro/health/cyber/climate). Each risk is scored on a 5×5 likelihood ×
impact matrix following Group risk-scoring guidelines, and assigned to a
designated Executive Risk Owner with a defined mitigation programme, Key
Risk Indicators (KRIs), and review cadence.
11.2 Top-10 Principal Risks Register
The following table presents the top-10 risks ranked by composite
(likelihood × impact) score, together with the residual risk position
after primary mitigation:
| # | Risk | Category | Inherent Score | Mitigation Strategy | Residual |
|---|---|---|---|---|---|
| 1 | NHI implementation pace & scope ambiguity | Regulatory | H × H = 20 | Active engagement with NDoH; flexible payer-mix model; Phase III ambulatory hedge; international medical traveller revenue | M × H = 15 |
| 2 | Construction cost overrun / delay | Operational | M × H = 15 | Fixed-price EPC contracts with liquidated damages; 8% contingency reserve; experienced PM Owner’s Engineer; bank technical adviser | L × M = 6 |
| 3 | Specialist doctor recruitment shortfall | Operational | M × H = 15 | Founding Doctor Programme with equity participation; medical-school affiliation MoUs; tier-1 international recruiter; “specialist-friendly” facility design | L × M = 6 |
| 4 | Currency volatility (ZAR/USD) | Financial | H × M = 12 | USD-denominated debt service hedged via cross-currency swap; revenue indexed to medical inflation (USD-correlated) | L × M = 6 |
| 5 | Cyber-attack / EMR data breach | Operational | M × H = 15 | Zero-trust architecture; dual-cloud SOC; cyber insurance USD 50M tower; quarterly penetration testing; HIPAA/POPIA-equivalent controls | L × M = 6 |
| 6 | Discovery medical aid network exclusion | Market | M × H = 12 | Multi-payer strategy (Bonitas, Momentum, Medihelp, GEMS, cash); price competitiveness ~15% below incumbents; quality differentiator | L × M = 6 |
| 7 | Clinical adverse event / litigation | Operational | L × H = 10 | JCI accreditation Y3; Just Culture programme; tier-1 professional indemnity; Patient Safety Officer; transparent disclosure protocol | L × M = 6 |
| 8 | Eskom load-shedding / utility failure | Operational | H × M = 12 | Solar PV + battery + diesel triple-redundancy; water storage 7 days; gas back-up; ISO 22301 BCMS | L × L = 3 |
| 9 | Medical inflation > tariff increases | Financial | M × M = 9 | Annual repricing negotiations; case-mix shift to higher-acuity; cost-leadership initiatives; supply-chain consolidation | L × M = 6 |
| 10 | Pandemic / public health emergency | Exogenous | L × H = 10 | Pandemic preparedness playbook (post-COVID lessons); negative-pressure isolation capacity; PPE strategic stockpile; revenue diversification | L × M = 6 |
11.3 Risk Category Deep-Dives
11.3.1 Regulatory & Policy Risk
National Health Insurance (NHI) is the most-cited risk by South
African private healthcare investors. The NHI Act was signed into law on
15 May 2024 and gazetted the following day; however, no effective
implementation date has been promulgated, and the legislation is
currently subject to multiple constitutional challenges from organised
business, medical schemes, and civil society. The Department of Health’s
own implementation timeline contemplates Phase 1 (2023–2026) focused on
institutional preparation, and Phase 2 (2026–2028) focused on selective
contracting — meaning that material disruption to the private medical
aid model is unlikely before 2028 at the earliest. Aurelia’s investment
thesis explicitly accommodates a transition pathway: as a
JCI-accredited, technology-leading, cost-competitive operator, Aurelia
is positioned as a preferred selective-contracting partner under any
future NHI framework, while maintaining diversified revenue streams
(international medical travellers, cash-pay diagnostics, ambulatory
networks) that are structurally less exposed to NHI dynamics.
11.3.2 Operational & Clinical Risk
Clinical risk is mitigated through a multi-layered framework: (i)
credentialing and privileging via Group Clinical Governance Committee
chaired by the Group CMO; (ii) mandatory adverse event reporting via the
EMR with root-cause analysis under a Just Culture model; (iii)
standardised clinical protocols benchmarked to NICE and Royal College
guidelines; (iv) hospital-acquired infection rates monitored monthly
with quarterly board reporting; (v) peer review and outcomes
benchmarking via international participation in the Vizient and PRoMOC
databases. JCI accreditation is targeted for Year 3 of operation for the
Johannesburg flagship and within 24 months of commissioning for each
Phase II facility.
11.3.3 Financial & Funding Risk
The capital structure is designed to be resilient to multiple stress
scenarios. The senior debt facility carries customary DFI covenants —
minimum DSCR 1.30x, maximum Debt/EBITDA 4.0x by Year 6, minimum tangible
net worth — but the base case projects DSCR of 1.97x in Year 4 (first
amortisation year), rising to 5.79x by Year 6. The 18-year tenor and
3-year grace period eliminate refinancing risk during construction.
Equity contributions are fully committed pre-financial-close. Working
capital facilities of USD 25M (uncommitted standby) are pre-arranged
with two South African commercial banks. The model is stressed against a
downside scenario combining (i) 25% revenue shortfall, (ii) 200bps rate
increase, and (iii) 25% ZAR depreciation — under which the project
remains debt-service-compliant, with DSCR no lower than 1.10x in any
year (covenant breach mitigated by sponsor cure rights).
11.4 Sensitivity Analysis
The Equity IRR (combined sponsor + AfDB) has been stress-tested
against the eight most material variables in the model. Each variable is
flexed by ±20% (or ±200bps for rate variables) to identify the principal
value drivers. The tornado chart below isolates the impact of each
variable on the Base Case Equity IRR of 20.7%:
The analysis confirms that Equity IRR is most sensitive to (i)
revenue per case (essentially payer mix and pricing power), (ii)
bed-occupancy ramp-up speed, (iii) construction capex per bed, (iv)
doctor-affiliation fee economics, and (v) FX. Encouragingly, the project
remains attractive (Equity IRR > 12.0%) under all single-variable
downside flexes, demonstrating robustness of the underlying
value-creation hypothesis.
11.5 Scenario Analysis
Beyond single-variable sensitivities, the model has been run through
five integrated scenarios designed to test the project’s resilience to
plausible combinations of adverse and favourable conditions:
| Scenario | Description | Revenue Y10 | EBITDA Margin Y10 | Equity IRR |
|---|---|---|---|---|
| Bear | −25% rev, +25% ZAR depreciation, +200bps rates, 12-month delay | $346M | 24.5% | 12.7% |
| Downside | −10% rev, +10% ZAR, +100bps rates | $415M | 30.0% | 17.2% |
| Base | Per central plan | $461M | 34.3% | 20.7% |
| Upside | +10% rev, NHI selective contracting tailwind | $507M | 36.5% | 24.0% |
| Bull | +15% rev, faster Phase II ramp, accretive M&A in Y6 | $580M | 38.0% | 27.2% |
| Even in the Bear case (a coincident triple-stress combining demand shock, FX depreciation, and rate increase), Equity IRR remains above the 12.0% sponsor-equity hurdle rate, debt service is fully covered (DSCR > 1.30x covenant), and exit valuation supports return of capital plus modest equity premium. This demonstrates the project’s structural resilience to adverse macro and operating conditions. |
||||
Confidential — this business plan is provided to prospective investors and lenders for evaluation purposes only and may not be reproduced or distributed without the written consent of Aurelia Healthcare Holdings (Pty) Ltd.