Internal C ontrol - Corporate governance

1 Internal ControlGuidance for Directors on the combined CodeISBN 1 84152 010 1 Published by The Institute of Chartered Accountants in England & WalesChartered Accountants HallPO Box 433 Moorgate PlaceLondon EC2P 2 BJInternet: The Institute of CharteredAccountants in England & WalesFurther copies can be obtained from:Accountancy BooksPO Box 21375 London WC1N 1 QPTelephone 020 7920 8991 Fax 020 7920 1999 Internal ControlGuidance for Directors on the combined code Internal Control1 Forewordfrom the London Stock ExchangeThe London Stock Exchange welcomes the publication of Internal Control: Guidancefor Directors on the combined code , published by the Internal Control Working Partyof the Institute of Chartered Accountants in England & Wales.

2 The work involved in preparing this guidance for directors of UK incorporated listedcompanies in respect of Principle of the combined code , and its associatedProvisions and , is greatly Working Party s guidance is consistent with both the requirements of theCombined code and of the related Listing Rule disclosure requirements, and clarifiesto boards of directors of listed companies what is expected of them. We consider that compliance with the guidance will constitute compliance withCombined code provisions and and provide appropriate narrativedisclosure of how code principle has been the guidance has been adopted in full by a company the guidance on InternalControl and Financial Reporting (the Rutteman guidance)

3 Will have been superseded and full compliance with the combined code and Listing Rule requirements is GeradineHead of ListingLondon Stock ExchangeSeptember 1999 Internal Control2 ContentsParagraph number(s)IntroductionInternal control requirements of the combined Code1-7 Objectives of the guidance8-9 The importance of Internal control and risk management10-13 Groups of companies14 The Appendix15 Maintaining a sound system of Internal controlResponsibilities16-19 Elements of a sound system of Internal control20-24 Reviewing the effectiveness of Internal controlResponsibilities25-26 The process for reviewing effectiveness27-34 The board s statement on Internal control35-41 Internal audit42-47 AppendixAssessing the

4 Effectiveness of the company s risk and control processesMembership of the Internal Control Working Party Internal Control3 IntroductionInternal control requirements of the combined the combined code of the Committee on Corporate governance (the code ) was published, the Institute of Chartered Accountants in England &Wales agreed with the London Stock Exchange that it would provide guidance toassist listed companies to implement the requirements in the code relating tointernal the code states that The board should maintain a sound systemof Internal control to safeguard shareholders investment and the company sassets.

5 That The directors should, at least annually, conduct areview of the effectiveness of the group s system of Internal control and shouldreport to shareholders that they have done so. The review should cover allcontrols, including financial, operational and compliance controls and riskmanagement . that Companies which do not have an Internal auditfunction should from time to time review the need for one . of the London Stock Exchange Listing Rules states that in thecase of a company incorporated in the United Kingdom, the following additionalitems must be included in its annual report and accounts:(a)a narrative statement of how it has applied the principles set out in Section 1of the combined code , providing explanation which enables its shareholdersto evaluate how the principles have been applied.

6 (b)a statement as to whether or not it has complied throughout the accountingperiod with the code provisions set out in Section 1 of the combined company that has not complied with the code provisions, or complied withonly some of the code provisions or (in the case of provisions whoserequirements are of a continuing nature) complied for only part of anaccounting period, must specify the code provisions with which it has notcomplied, and (where relevant) for what part of the period such non-compliance continued, and give reasons for any non-compliance.

7 Preamble to the code , which is appended to the Listing Rules, makes it clear that there is no prescribed form or content for the statement setting outhow the various principles in the code have been applied. The intention is thatcompanies should have a free hand to explain their governance policies in thelight of the principles, including any special circumstances which have led tothem adopting a particular guidance in this document should be followed by boards of listed companiesin:lassessing how the company has applied code principle ;limplementing the requirements of code provisions and.

8 And lreporting on these matters to shareholders in the annual report and of the guidance is intended to:lreflect sound business practice whereby Internal control is embedded in the business processes by which a company pursues its objectives; lremain relevant over time in the continually evolving business environment;andlenable each company to apply it in a manner which takes account of its particular circumstances. The guidance requires directors to exercise judgement in reviewing how thecompany has implemented the requirements of the code relating to internalcontrol and reporting to shareholders guidance is based on the adoption by a company s board of a risk-basedapproach to establishing a sound system of Internal control and reviewing itseffectiveness.

9 This should be incorporated by the company within its normalmanagement and governance processes. It should not be treated as a separate exercise undertaken to meet regulatory importance of Internal control and risk company s system of Internal control has a key role in the management ofrisks that are significant to the fulfilment of its business objectives. A soundsystem of Internal control contributes to safeguarding the shareholders investment and the company s control (as referred to in paragraph 20) facilitates the effectiveness andefficiency of operations, helps ensure the reliability of Internal and externalreporting and assists compliance with laws and financial controls, including the maintenance of proper accountingrecords, are an important element of Internal control.

10 They help ensure that thecompany is not unnecessarily exposed to avoidable financial risks and thatfinancial information used within the business and for publication is reliable. Theyalso contribute to the safeguarding of assets, including the prevention anddetection of company s objectives, its Internal organisation and the environment in which itoperates are continually evolving and, as a result, the risks it faces arecontinually changing. A sound system of Internal control therefore depends on athorough and regular evaluation of the nature and extent of the risks to which thecompany is exposed.