Connect - Schneider Electric

Connect - Schneider Electric Connect - Schneider Electric

schneider.electric.com.au
from schneider.electric.com.au More from this publisher
14.11.2012 Views

3 CORPORATE GOVERNANCE INTERNAL CONTROL AND RISK MANAGEMENT 10.3 Distributing information: benchmarks and guidelines The main internal control benchmarks are available to all employees, notably on the Group intranet. The Global Functions send updates of these Registration Documents to the appropriate units and individuals through their networks of correspondents. In some cases, dedicated e-mails are sent out or messages are posted on the intranet portal to inform users about publications or updates. Whenever possible, the distribution network leverages the managerial/functional organisation to distribute standards and guidelines. Principles of Responsibility The Principles of Responsibility, initially published in 2002, were updated in 2009. Translated into all the languages used within the Group, given to all new employees and available on the Group’s intranet, they are designed to guide employees in their decisions and actions. They defi ne the Group’s essential values and set out individual responsibility in respect of these values. They also set out the interrogation and alert procedures. A Committee on Ethics and Responsibility has been set up, and correspondents appointed to steer action in this area, to make updates and to validate changes. The Committee also answers employee questions that are not addressed in the companion guide to the Principles of Responsibility, or that employees’ own managers are unable to answer. (see “Sustainable development framework”, Chapter 2 Section 2). In 2011, Internal Audit carried out an assignment aimed at assessing the deployment of the Principals of Responsibility as well as the adequacy of the information and training resources with managers and employees. Insider code This code sets out the rules to be followed by management and employees to prevent insider trading. It imposes an obligation of confi dentiality on all employees who have access to confi dential information and sets permanent restrictions on purchases and sales of Schneider Electric SA shares by persons who have access to price-sensitive information in the course of their work (see “Organisational and operating procedures of the Supervisory Board”, Chapter 3 § 2). International internal auditing standards The Schneider Electric internal auditors are committed to complying with the international standards published by the Institute of Internal Auditors (IIA) and other bodies. International Financial Reporting Standards (IFRS) The consolidated fi nancial statements for all fi scal years commencing on and after January 1, 2005 have been prepared in accordance with International Financial Reporting Standards (IFRS), in compliance with European Union regulation 1606/2002. 136 2011 REGISTRATION DOCUMENT SCHNEIDER ELECTRIC The Group applies IFRS as adopted by the European Union as of December 31, 2011. The Group’s accounting principles refl ect the underlying assumptions and qualitative characteristics identifi ed in the IFRS accounting framework. accrual accounting, business continuity, true and fair view, rule of substance over form, neutrality, prudence, completeness, comparability, relevance and intelligibility. The application of Group accounting principles and methods is mandatory for all Group entities, for management reporting and statutory consolidation. IFRS guidelines are available on the intranet, along with training modules covering the more technical aspects. Commitment limits and authorisations Commitment limits have been set for executives from Group level down to the individual units. Thus, product purchase and sale contracts may only be signed by, or with the authorisation of, operations correspondents who benefi t from ad-hoc authorisations which, in turn, are granted by their managers. Within this organisational framework, Business executives have the power to authorise the signature of product or service, purchase or sale contracts covering up to EUR10 million. Moreover, they enable their collaborators to authorise smaller amounts which they consider appropriate for the signature of such contracts. Moreover, all transactions that may affect the Group’s fundamental interests, due to their size or nature, must be authorised in advance by the Management Board or, in some cases, by the Supervisory Board. This rule applies in particular to all transactions affecting the scope of consolidation, purchases and sales of strategic assets, trademarks and patents, and off-balance sheet commitments. Statutory and management reporting principles An integrated reporting and consolidation system applicable to all Group companies and their management units has been in place since January 1, 2006. Statutory and management reporting principles and support tools are available on the Group intranet. The subsidiaries record their transactions in accordance with Group standards. Data are then adjusted, where necessary, to produce the local statutory and tax accounts. The reporting system includes consistency controls, a comparison of the opening and closing balance sheets and items required to analyse management results. Key Internal Controls A list of Key Internal Controls was drawn up in 2008 and is expanded annually. Its 114 items cover: • the control environment (Principles of Responsibility, Delegation of Powers, Separation of Functions, Business Continuity Plans and Retention of Records);

• operating processes (purchases, sales, inventories, etc.); • accounting and fi nancial cycles; • Human Resources, IT, Legal and Tax cycles. The Key Internal Controls are available to all units on the Group intranet, along with appendices with more detailed information, links to full policy descriptions on the Functions’ intranets, an 10.4 Risk identification and management General risks at the Group level The Internal Audit Department interviews the Group’s 55 top managers to update the list of general risks at the Group level each year. The risks identifi ed through these interviews are ranked by impact and probability of occurrence. The threat/opportunity aspect of each risk is also taken into account. Risk factors related to the Company’s business, as well as procedures for managing and reducing those risks, are described in “Risk Factors.” These procedures are an integral part of the internal control system. The risk matrix and the analysis of changes from one year to the next contribute to the development of an internal audit plan for the following year. Half of the major and general risks identifi ed at end-2010 were addressed in audits carried in 2011 to assess action plans for managing and reducing risks. Operating risks at the unit level Operating risks are managed fi rst and foremost by the units in liaison with the Operating Divisions, based on Group guidelines (notably the Key Internal Controls). Each subsidiary is responsible for implementing procedures providing an adequate level of internal control. The Operating Divisions implement cross-functional action plans for operating risks identifi ed as being recurrent in the units or as having a material impact at the Group level. The internal control system is adjusted to account for these risks as needed. The Group’s insurance programs cover the remaining portion of transferable risks. Risk Solutions The Risk Solutions Management Department , defi nes and implements principles and tools designed to manage these risks; In 2011, a network of Solution Risk managers was set up to assess the risks inherent in all major projects. The rules for entering into agreements and adopting solutions in projects were updated. CORPORATE GOVERNANCE INTERNAL CONTROL AND RISK MANAGEMENT explanation of the risks covered by each Key Internal Control and a self-assessment guide. For each cycle, the Key Internal Controls cover compliance, reliability, risk prevention and management and process performance. The operating units fi ll out self-assessment questionnaires concerning the Key Internal Controls. Risk management by the Risk and Insurance Department The Risk and Insurance Department contributes to internal audits by defi ning and deploying a Group-wide insurance strategy, as defi ned in “Risk Factors and Insurance Strategy.” The insurance strategy includes the identifi cation and assessment of the main insurable risks and defi nes and recommends measures to prevent these risks and protect assets. Risk management by the Safety Department The Group’s Security Department defi nes corporate governance with regard to loss prevention in the area wilful acts against property and people. In this respect and in close cooperation with the Risk and Insurance Department, it is directly involved in assessing the nature of such risk as well as defi ning adequate prevention and protection measures. The Security Department publishes internally a table of “Country Risks” for use in security procedures that are mandatory for people travelling, expatriates and local employees. On request it provides support to local teams for any security issues (site audit, expatriates or local employee security, security whilst on assignments, etc.). It brings its methodology to develop emergency plans (Evacuation plans, Crisis management plans, Business continuity plans, etc.) and ensures coordination of the Corporate Crisis Team (SEECC - Schneider Electric Emergency Coordination Center) each time that it is activated. The Security Department is integrated in the “Fraud Committee” alongside the Internal Audit Department and the Legal Department and gets involved in combatting internal fraud (managing and carrying out internal investigations). Management of information system risks An IT Security unit within the Information, Process and Organisation Department defi nes and implements specifi c security policies for information systems. This department has specifi c skills in auditing the security of IT systems. After each site audit, a report is issued setting out fi ndings and recommendations for the attention of the persons in charge of the entity audited. 2011 REGISTRATION DOCUMENT SCHNEIDER ELECTRIC 137 3

3 CORPORATE GOVERNANCE<br />

INTERNAL CONTROL AND RISK MANAGEMENT<br />

10.3 Distributing information: benchmarks and guidelines<br />

The main internal control benchmarks are available to all employees,<br />

notably on the Group intranet. The Global Functions send updates<br />

of these Registration Documents to the appropriate units and<br />

individuals through their networks of correspondents.<br />

In some cases, dedicated e-mails are sent out or messages are<br />

posted on the intranet portal to inform users about publications<br />

or updates.<br />

Whenever possible, the distribution network leverages the<br />

managerial/functional organisation to distribute standards<br />

and guidelines.<br />

Principles of Responsibility<br />

The Principles of Responsibility, initially published in 2002, were<br />

updated in 2009.<br />

Translated into all the languages used within the Group, given<br />

to all new employees and available on the Group’s intranet, they<br />

are designed to guide employees in their decisions and actions.<br />

They defi ne the Group’s essential values and set out individual<br />

responsibility in respect of these values. They also set out the<br />

interrogation and alert procedures.<br />

A Committee on Ethics and Responsibility has been set up, and<br />

correspondents appointed to steer action in this area, to make<br />

updates and to validate changes. The Committee also answers<br />

employee questions that are not addressed in the companion<br />

guide to the Principles of Responsibility, or that employees’ own<br />

managers are unable to answer. (see “Sustainable development<br />

framework”, Chapter 2 Section 2). In 2011, Internal Audit carried out<br />

an assignment aimed at assessing the deployment of the Principals<br />

of Responsibility as well as the adequacy of the information and<br />

training resources with managers and employees.<br />

Insider code<br />

This code sets out the rules to be followed by management and<br />

employees to prevent insider trading. It imposes an obligation of<br />

confi dentiality on all employees who have access to confi dential<br />

information and sets permanent restrictions on purchases and<br />

sales of <strong>Schneider</strong> <strong>Electric</strong> SA shares by persons who have<br />

access to price-sensitive information in the course of their work<br />

(see “Organisational and operating procedures of the Supervisory<br />

Board”, Chapter 3 § 2).<br />

International internal auditing standards<br />

The <strong>Schneider</strong> <strong>Electric</strong> internal auditors are committed to complying<br />

with the international standards published by the Institute of Internal<br />

Auditors (IIA) and other bodies.<br />

International Financial Reporting Standards<br />

(IFRS)<br />

The consolidated fi nancial statements for all fi scal years<br />

commencing on and after January 1, 2005 have been prepared in<br />

accordance with International Financial Reporting Standards (IFRS),<br />

in compliance with European Union regulation 1606/2002.<br />

136 2011 REGISTRATION DOCUMENT SCHNEIDER ELECTRIC<br />

The Group applies IFRS as adopted by the European Union as of<br />

December 31, 2011.<br />

The Group’s accounting principles refl ect the underlying<br />

assumptions and qualitative characteristics identifi ed in the IFRS<br />

accounting framework. accrual accounting, business continuity,<br />

true and fair view, rule of substance over form, neutrality, prudence,<br />

completeness, comparability, relevance and intelligibility.<br />

The application of Group accounting principles and methods is<br />

mandatory for all Group entities, for management reporting and<br />

statutory consolidation.<br />

IFRS guidelines are available on the intranet, along with training<br />

modules covering the more technical aspects.<br />

Commitment limits and authorisations<br />

Commitment limits have been set for executives from Group level<br />

down to the individual units.<br />

Thus, product purchase and sale contracts may only be signed<br />

by, or with the authorisation of, operations correspondents who<br />

benefi t from ad-hoc authorisations which, in turn, are granted by<br />

their managers. Within this organisational framework, Business<br />

executives have the power to authorise the signature of product or<br />

service, purchase or sale contracts covering up to EUR10 million.<br />

Moreover, they enable their collaborators to authorise smaller<br />

amounts which they consider appropriate for the signature of such<br />

contracts.<br />

Moreover, all transactions that may affect the Group’s fundamental<br />

interests, due to their size or nature, must be authorised in advance<br />

by the Management Board or, in some cases, by the Supervisory<br />

Board. This rule applies in particular to all transactions affecting the<br />

scope of consolidation, purchases and sales of strategic assets,<br />

trademarks and patents, and off-balance sheet commitments.<br />

Statutory and management<br />

reporting principles<br />

An integrated reporting and consolidation system applicable to all<br />

Group companies and their management units has been in place<br />

since January 1, 2006. Statutory and management reporting<br />

principles and support tools are available on the Group intranet.<br />

The subsidiaries record their transactions in accordance with Group<br />

standards. Data are then adjusted, where necessary, to produce<br />

the local statutory and tax accounts.<br />

The reporting system includes consistency controls, a comparison<br />

of the opening and closing balance sheets and items required to<br />

analyse management results.<br />

Key Internal Controls<br />

A list of Key Internal Controls was drawn up in 2008 and is expanded<br />

annually. Its 114 items cover:<br />

• the control environment (Principles of Responsibility, Delegation<br />

of Powers, Separation of Functions, Business Continuity Plans<br />

and Retention of Records);

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!