Corporate governance provides the institutional framework that protects all stakeholders by ensuring the integrity, accuracy, and reliability of financial statements. Effective board oversight is a critical deterrent against financial misreporting, fraud, and value destruction.

 

The Role of the Board of Directors

  • The Board of Directors holds ultimate fiduciary responsibility for the governance of the entity, including oversight of financial reporting processes, internal controls, and risk management frameworks.
  • The board must maintain a sufficient proportion of independent non-executive directors who are free from conflicts of interest and capable of providing objective oversight of management.
  • Under major governance codes (e.g., UK Corporate Governance Code, NYSE/NASDAQ listing requirements), the board must establish specialized committees to enhance oversight effectiveness.

Audit Committee Responsibilities

The Audit Committee is the board’s primary oversight mechanism for financial reporting integrity. Its key responsibilities include:

 

Financial Reporting Oversight:

  • Oversees the entire financial reporting process — from accounting policy selection to the preparation and approval of financial statements.
  • Reviews all critical accounting judgments, estimates, and areas of significant uncertainty disclosed in the financial statements.
  • Scrutinizes the appropriateness of accounting policy choices and challenges management where alternative, more aggressive policies may have been selected.

External Auditor Oversight:

  • Directs the appointment (and, where necessary, removal) of the independent external auditor, subject to shareholder ratification.
  • Approves external auditor compensation and evaluates auditor independence on an ongoing basis, monitoring relationships that could compromise objectivity.
  • Reviews the external audit plan, including the scope of audit procedures, key audit matters (KAMs), and the approach to areas of significant estimation uncertainty.
  • Evaluates the quality, completeness, and candor of the external audit findings and management’s responses.

Internal Controls and Risk Management:

  • Oversees the design and effectiveness of the company’s internal control systems, including Internal Controls over Financial Reporting (ICFR).
  • Reviews reports from the internal audit function and monitors remediation of identified control deficiencies.
  • Ensures appropriate whistleblowing mechanisms are in place to allow employees to report financial irregularities without fear of retaliation.

Pre-Release Financial Statement Review:

  • Reviews and approves annual and interim financial statements prior to public release, ensuring compliance with applicable accounting standards, regulatory requirements, and governance codes.

Management Accountability

Primary Responsibility for Financial Statements:

  • Management — specifically the Chief Executive Officer (CEO) and Chief Financial Officer (CFO) — retains primary legal and professional responsibility for preparing financial statements in accordance with applicable accounting standards.
  • This responsibility cannot be delegated to the external auditor or the audit committee.

Executive Certification Requirements:

  • Under the Sarbanes-Oxley Act of 2002 (SOX) Section 302 and 906, the CEO and CFO of US public companies must personally certify the accuracy and completeness of financial reports filed with the SEC.
  • Criminal penalties (including imprisonment) apply for knowingly false certifications.
  • Similar certification requirements exist in other jurisdictions (e.g., the UK’s Directors’ Responsibilities Statement under the Companies Act 2006).

Internal Controls over Financial Reporting (ICFR):

  • Under SOX Section 404, management must assess and report on the effectiveness of ICFR at the end of each fiscal year using a recognized internal control framework (most commonly COSO — the Committee of Sponsoring Organizations of the Treadway Commission framework).
  • The external auditor must independently attest to and report on the effectiveness of ICFR for large accelerated filers.
  • ICFR deficiencies are classified as:
    • Control Deficiency: A shortcoming that does not meet the threshold of significant deficiency or material weakness.
    • Significant Deficiency: A deficiency, or combination of deficiencies, that is less severe than a material weakness, but important enough to merit attention by those responsible for oversight.
    • Material Weakness: A deficiency, or combination of deficiencies, in ICFR such that there is a reasonable possibility that a material misstatement of the financial statements will not be prevented or detected on a timely basis.

Â