Learning Objectives
By the end of this lesson, learners should be able to:
- Explain financial governance and its importance.
- Distinguish governance from management.
- Explain ethical principles relevant to financial decision-making.
- Understand the role of boards, executives and control functions.
- Explain the purpose of internal financial controls.
- Identify major types of internal controls.
- Evaluate control weaknesses and their consequences.
- Understand the relationship between governance, ethics, controls and organizational performance.
1. Meaning of Financial Governance
Financial governance refers to the structures, processes, policies and oversight mechanisms used to ensure that an organization’s financial resources are managed responsibly and that financial decisions are transparent, controlled and aligned with organizational objectives.
It establishes how financial authority and accountability are distributed among:
- The board.
- Executive management.
- Finance functions.
- Internal audit.
- Risk functions.
- External assurance providers.
- Other relevant stakeholders.
2. Governance versus Management
These concepts are related but distinct.
Governance
Primarily concerns:
- Direction.
- Oversight.
- Accountability.
- Risk oversight.
- Strategic supervision.
- Monitoring management.
Management
Primarily concerns:
- Execution.
- Operations.
- Implementation of strategy.
- Resource deployment.
- Day-to-day decision-making.
A board should provide effective oversight without unnecessarily taking over management’s operational responsibilities.
3. Principles of Effective Financial Governance
Strong financial governance generally emphasizes:
- Accountability.
- Transparency.
- Integrity.
- Responsibility.
- Independence.
- Fairness.
- Effective oversight.
- Appropriate disclosure.
These principles help protect organizational resources and strengthen stakeholder confidence.
4. Role of the Board
The board has an important oversight role in financial governance.
Depending on the organization’s structure and applicable legal requirements, the board may oversee:
- Financial strategy.
- Major investments.
- Capital structure.
- Risk.
- Financial reporting.
- Internal controls.
- Executive performance.
- Major transactions.
The board should obtain sufficient information to challenge management effectively.
5. Audit Committee
An audit committee can strengthen financial governance by providing focused oversight of:
- Financial reporting.
- Internal controls.
- Internal audit.
- External audit.
- Financial risk.
- Significant accounting judgements.
Its effectiveness depends on appropriate expertise, independence and access to relevant information.
6. Financial Ethics
Financial ethics concerns the principles governing responsible and honest financial conduct.
Key principles include:
- Integrity.
- Objectivity.
- Professional competence.
- Confidentiality.
- Transparency.
- Fair dealing.
- Responsibility.
Financial ethics becomes particularly important when executives face pressure to improve reported performance.
7. Conflicts of Interest
A conflict of interest arises when personal interests could improperly influence professional judgement or decision-making.
Examples may include:
- Personal financial interests in a supplier.
- Undisclosed relationships with contractors.
- Executive interests in an investment under consideration.
- Preferential treatment of related parties.
A conflict does not necessarily mean misconduct has occurred.
However, it should be appropriately disclosed, assessed and managed.
8. Ethical Financial Decision-Making
Executives should consider more than whether a decision is technically permissible.
A useful ethical framework asks:
- Is the decision lawful?
- Is it consistent with organizational policies?
- Is the information accurate?
- Are relevant conflicts disclosed?
- Could the decision mislead stakeholders?
- Would the decision withstand independent scrutiny?
- Is the decision consistent with professional responsibilities?
9. Internal Financial Controls
Internal controls are processes designed to provide reasonable assurance regarding objectives such as:
- Reliable financial reporting.
- Effective and efficient operations.
- Safeguarding of assets.
- Compliance with applicable requirements.
Internal control is not simply an accounting function.
It is an organizational responsibility.
10. Components of Internal Control
The COSO framework identifies five integrated components:
1. Control Environment
The organization’s ethical culture, leadership and accountability structure.
2. Risk Assessment
Identification and evaluation of risks that could prevent objectives from being achieved.
3. Control Activities
Policies and procedures designed to mitigate identified risks.
4. Information and Communication
Ensuring relevant information reaches appropriate decision-makers.
5. Monitoring Activities
Assessing whether controls continue to operate effectively.
11. Examples of Control Activities
Important financial controls include:
- Authorization procedures.
- Segregation of duties.
- Reconciliations.
- Access controls.
- Approval limits.
- Independent reviews.
- Physical safeguards.
- Exception reporting.
No single control should be assumed to eliminate all financial risk.
12. Segregation of Duties
Segregation of duties separates incompatible responsibilities.
For example, where practical, different individuals should be responsible for:
- Authorizing a transaction.
- Recording the transaction.
- Holding the related asset.
- Reviewing the transaction.
This reduces opportunities for error and fraud.
13. Preventive and Detective Controls
Preventive Controls
Designed to prevent an undesirable event.
Examples:
- Approval requirements.
- Access restrictions.
- Transaction limits.
Detective Controls
Designed to identify problems after they occur.
Examples:
- Bank reconciliations.
- Internal audits.
- Exception reports.
- Variance analysis.
Strong control systems generally require both.
14. Limitations of Internal Controls
Internal controls provide reasonable, not absolute, assurance.
Limitations may arise from:
- Human error.
- Collusion.
- Management override.
- Poor judgement.
- Cost constraints.
- Technological failures.
- Changing circumstances.
Therefore, executives should avoid assuming that a documented control automatically means risk has been eliminated.
15. Internal Audit
Internal audit provides independent and objective assurance and advisory activities designed to add value and improve organizational operations.
Internal audit may evaluate:
- Controls.
- Risk management.
- Governance.
- Financial processes.
- Operational processes.
Its role should be sufficiently independent from the activities it evaluates.
16. External Audit
External audit provides independent assurance over financial statements within the applicable reporting and assurance framework.
The external auditor’s role should not be confused with management’s responsibility for preparing financial information and maintaining appropriate controls.
17. Three Lines Model
The Three Lines Model provides a framework for understanding organizational roles in risk and control.
Broadly:
First line: Management and operational functions that own and manage risks.
Second line: Functions that provide expertise, support, monitoring and challenge relating to risk.
Third line: Internal audit providing independent assurance.
The model helps clarify responsibilities rather than suggesting that only one department owns risk.
18. Governance and Financial Reporting
Good financial governance supports:
- Reliable information.
- Appropriate accounting judgements.
- Transparent disclosures.
- Timely reporting.
- Effective oversight.
Poor governance can create conditions for:
- Misreporting.
- Concealed risks.
- Weak controls.
- Conflicts of interest.
- Financial misconduct.
Lesson Summary
Financial governance establishes the structures through which financial decisions are directed, monitored and held accountable.
Ethical conduct ensures that financial decisions are made with integrity and objectivity, while internal controls provide reasonable assurance that financial and operational objectives can be achieved.
Effective governance therefore requires more than policies. It requires appropriate oversight, ethical leadership, effective controls, independent challenge and continuous monitoring.
Key Principle
Effective financial governance aligns authority, accountability, ethical conduct and internal control so that organizational resources are protected and financial decisions remain transparent, responsible and strategically aligned.
References
- OECD — G20/OECD Principles of Corporate Governance
OECD Corporate Governance Principles - COSO — Internal Control—Integrated Framework
COSO - The Institute of Internal Auditors — Global Internal Audit Standards and Three Lines Model
The Institute of Internal Auditors - IFAC — International Ethics Standards Board for Accountants
IFAC