4.10 Risk Management, Internal Control and Internal Audit
The Company has the risk management and internal control system aimed at provisioning a reasonable assurance in achieving goals and strategy of the Rosseti Group’s development, incl. reliable, high-quality and easy-access electricity supply as well as operational goals of financial and economic operations. The RM&ICS develops and functions using unified principles that are accepted and complied with by governing bodies and employees of the Company at all management levels: consistency and complexity; goal orientation; integration into management; methodological unity; reasonable assurance; agility; responsiveness; records creation; dynamism; quality of information; prioritization; responsibility; division of powers and liabilities; cross-functional interaction; constant improvement.
The primary documents regulating the RM&ICS are the Risk Management and Internal Control Policy, Risk Appetite, Development of RM&IC Program, Arrangement of Risk Management and Internal Control Procedures, Evaluation and Monitoring of Risk Methodology and Determination of Risk Appetite Procedures, RM&IC glossary, risk register.
To guarantee the RM&ICS efficiency and compliance with changing requirements and conditions, the Company’s internal auditor evaluates the RMSrisk management system efficiency whether it complies with the target status and maturity level.
During the reported period, the Company implemented the following key measures to improve the RM&ICS:
- The following RM&IC regulatory and methodological documents were prepared / revised:
- Arrangement of RM&IC Procedures;
- A format of a report on the roll-out, functioning and efficiency of RM&ICS, format of a report on risk management.
- Process on revision of risk matrices and control procedures arranged.
- Control procedures were completed to evaluate sufficiency, effectiveness and efficiency of the RM&ICS, incl. complex audits of performance of the Company’s branches and subsidiaries.
- Trainings for the Company’s management and employees on RM&ICS roll-out and functioning were conducted.
In 2025, we plan to implement the following measures to improve the RM&ICS:
- Decomposition and correlation of corporate-level risks with business process risks.
- Revision of the Evaluation and Monitoring of Risks Methodology.
- Improvement of the mechanism for the control of financial stability, support of contractors’ liquidation and bankruptcy procedures.
| Indicator | MU | 2022 | 2023 | 2024 | 2024/2023, % |
|---|---|---|---|---|---|
| Number of conducted control activities focused on risk exposure and mitigation | pcs | 302 | 410 | 431 | 5.1% |
| Number of examined procurement-related materials (items) | pcs | 2,179 | 4,177 | 2,514 | -39.8% |
| Number of eliminated violations following the inspections conducted by external watchdogs | pcs (%) | 86.0 | 72.4 | 76.2 | 5% |
| Total sum of annulled fines after appeals against decisions to impose administrative sanctions | RUBruble million | 7.6 | 19.5 | 57.35 | 66% |
| Total funds received by the Company from contractors under liquidation and bankruptcy procedures | RUBruble million | 200 | 144.465 | 758.127 | 424.8% |
| The total amount of funds saved by the Company as a result of acquiring its own debt at auction from debtors undergoing bankruptcy proceedings | RUBruble million | 0 | 0 | 0 | — |
The Internal Audit Department is a unit, liable for internal audit. The Internal Audit Department is responsible to the Company’s Board of Directors (via the Audit Committee). This means that the Board of Directors oversees and administers the unit (namely, adoption of the unit’s action plan, progress report, its budget as well as assignment, dismissal and remuneration of the unit head).
The goal of internal audit is to assist the Board of Directors and executive bodies of the Company in enhancing efficacy of governance and improving its financial and economic performance, by enforcing systematic and coherent approaches to analysis and evaluation of the systems of risk management, internal control and corporate governance as tools of reasonable assurance in Company’s goal achievement. Goals and objectives, principles of IA rollout and functioning, functions and authorities of the internal audit are stipulated by the Internal Audit Policy[69]. In 2024, 8 employees performed internal audit functions.
The Company has adopted the following principal documents regulating internal audit performance:
- Amended and Restated Internal Audit Policy and Internal Auditor Ethics Code;
- Regulations on the Internal Audit Department;
- Amended and Restated Guarantee and Enhanced Quality of Internal Audit Program;
- Internal audit standards and standards of practical application, developed in compliance with the International Professional Internal Audit Standards.
Pursuant to the Regulations on the Board of Directors’ Audit Committee[57] arrangement, efficiency evaluation and enforcement of independency and neutrality of internal audit fall within the remit of the Board of Directors’ Audit Committee. The Audit Committee’s feedback is delivered to the head of the internal audit unit through the head’s interaction with the Committee, incl. analysis of resolutions/ recommendations of the Committee on matters falling under the competence of the internal audit unit and questionnaire survey of the Committee members. Satiation of the Audit Committee with the performance of the internal audit unit (average weighted total points from the questionnaires / quantity of votes of the Committee members) in 2024 corresponds with “full compliance” estimation value in line with the Guarantee and Enhanced Quality of Internal Audit Program.
Pursuant to the Guarantee and Enhanced Quality of Internal Audit Program, the quality of the Company’s internal audit is evaluated by independent external expert at least once in 5 years. External independent evaluation of the IA’s performance was carried out by OOOLimited Liability Company B1-Consult in 2024. After the evaluation, OOOLimited Liability Company B1-Consult presented a report, certifying general compliance of the Company’s internal audit performance with the International Professional Internal Audit Standards and Ethics Code and issued recommendations regarding improvements of internal audit practices.