As you do on a Friday, we have been having another read of the “Wates Corporate Governance Principles for Large Private Companies”, published in December 2018 and which will apply to company reporting for financial years starting on or after 1 January 2019. We should start seeing their impact in Annual Reports being published during…
Many organisations continue to use tactical solutions to support and facilitate their Internal Control and Compliance framework. Tactical solutions typically consist of an unholy and uneasy co-existence of spreadsheets, word documents, access databases, emails and SharePoint sites with large amounts of supporting documentation kept in hard copy. Two negative features, and natural by-products, of such…
The three lines of defence model is a ubiquitous concept to anyone involved in audit, internal control or compliance. In a nutshell, it can be summarised as: – 1st line of Defence – functions that have ownership, responsibility and accountability for directly assessing, controlling and mitigating risks, i.e. operational management 2nd line of Defence –…
GRC can often seem an overly complex and mystifying terrain. Objectives and activities often get mixed up with, and confused by, the technology that supposedly supports and facilitates them. We’ve abstracted away from the technology to provide a simple yet effective roadmap to GRC success. Have a look at our one page graphic which goes…
