Corporate Governance Flashcards
(30 cards)
Wilhelm Framework
- Problem Recognition
- Identification of alternative courses of action
- Evaluation of alternative courses of action (which alternative can be universally applied? which alternative respects the rights and dignity of stakeholders? which alt will product the most good and least harm? do any of the alternatives break moral code? does the alt demonstrate character of a good person?
- Estimation of outcome probabilities
- Calculation of expected values
- Justification of course of action taken
Principle-Agent Problem
Separation of ownership and management of a company which ultimately leads to issues and misalignment of interests. Due to lack of control and oversight by owners, other control mechanisms are required.
Constant balance between monitoring and control & value creation
Stewardship theory
Unlike other theories, this view is less motivated by personal gain (that individuals are self-interested and do not act in the interest of the shareholders), but for the sake of doing good (that individuals genuinely want what is best for the company)
Stewardship theory is a theory that managers, left on their own, will act as responsible stewards of the assets they control. Stewardship theorists assume that given a choice between self-serving behavior and pro-organizational behavior, a steward will place higher value on cooperation than defection.
Stakeholder theory
Must consider all stakeholders involved (society at large), not just that of the shareholder and maximizing SH value.
Trouble with the theory of creating ‘shareholder value’?
Difficult to assess who it the ultimate shareholder? What are their intentions? How do you decide if their action is in the shareholders interest?Who do those holders actually hold the shares for?
What is COSO?
Committee of sponsoring organizations:
COSO report presents a common definition of internal control and provides a framework guiding which internal control systems may be assessed.
What is internal control?
A process to provide reasonable assurance of accomplishing objectives related to 1) reliability of financial reporting 2) compliance with laws and regulations, 3) effectiveness & efficiency of operations.
SOX Titles
Title 1: created a new body PCAOB, independent of but reporting to the SEC to monitor the accountancy professions, ending self regulation.
Title 2: Auditor independence
Title 3: Corporate Social Responsibility- 302: senior execs take individual responsibility for the accuracy and completeness of financial reporting (quarterly & yearly reports)
Title 4: Enhanced financial disclosures
- 404: Mgmt must state their responsibilities for establishing and maintaining adequate IC over FR. Conclude on the effectiveness of the company’s IC over FR. State that the registered public accounting firm has attested to and reported on mgmts evaluation of the company’s IC. (yearly)
What is internal control over FR?
A process to provide reasonable assurance regarding the reliability of FR and preparation of FS for external purposes i.a.w. GAAP
Elements of COSO Framework
- Control environment- foundation of IC. Mgmgt establish tone at the top regarding importance of IC and expected standards of conduct.
- Risk assessment- dynamic process for identifying risks i.r.t. to the achivement of objectives and how the risks should be managed.
- Control activities- actions established through policies and procedures to help ensure that mgmt’s directives to mitigate risks are carried out to achieve objectives.
- Info & Communication- info is necessary to carry out IC responsibilities and communication is vital to obtain and share information.
- Monitoring- ongoing and separate evaluations to ascertain whether IC is present and functioning.
What is Corporate Governance?
Multiple definitions:
- it is the orgs strategic response to risk
- it is a process used to manage the business affairs of the company towards enhancing business prosperity & corporate accountability with the objective of realizing LT shareholder value while taking into account the interests of stakeholder.
Enterprise risk management
A process effected by an entity’s board of directors, management, and other personnel applied in strategy setting and across the enterprise designed to identify potential events that may affect the entity and manage risks to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives.
The aim of ERM framework is to help orgs in making strategic objectives which can effectively identify, assess, respond, and control risks. Which is why IC framework is complementary to the Erm framework (ICF is integral part of ERMF)
Dutch CG Code on Risk Management
- Management board is responsible for setting the strategy of business, identifying and analyzing risks associated with strategy, designing, implementing and maintaining risk and control structures, monitoring the operational effectiveness of risk and control structures.
- management board shall report on the design and operational effectiveness and discuss the internal risk management and control systems with the supervisory board and its audit committee.
- the audit committee shall propose an external accountant to the shareholders meeting and monitor the functioning of the auditor.
- the audit report shall discuss the audit plan with the audit committee. the external auditor will report its findings in the management letter.
- the external auditor is present at the general shareholders meeting.
5 components of ERM
- governance and culture: sets entity’s tone, reinforce importance of ERM, establish oversight responsibilities.
- strategy and objective setting: ERM is integrated in the orgs strategy and objective setting process to gain insight into internal and external risk factors. Here too their risk appetite is determined.
- performance: identifies and assesses risks to the achievement of the strategy. According to their severity and orgs risk appetite. The org sets risk responses and monitors the performance by developing a portfolio view.
- Review and Revision: review the risks and performance relative to its targets. Derives inputs for continuous improvement.
- Info, communication, and reporting: use of internal and external info to support ERM. Leverage IT systems to capture, process, and manage info. Reports on risk, culture and performance.
External risk factors
- political
- economic (i.e. FX rates)
- Social (customer needs)
- Technological (R&D activity, tech disruptions)
- Legal
- Environmental
Internal risk factors
- Capital
- People
- Process
- Technology
Steps for assessing risks
- Identifying risks
- Assessing risks
- Prioritizing risks
- Responding to risks
- Developing a portfolio view- residual (and all) risk assessment overview
- Monitoring performance
What are ethics?
Involves awareness of good and wrong, the awareness of choice and responsibility, and morality and moral values.
Ethics are essentially the principles of conduct governing an organization.
Non-executives (Sup. Board) Role
1) They should ensure executives are acting in the interest of shareholders.
2) And they should be certain that the appointed execs are capable (hiring, firing decisions are endorsed by SH).
Different Type of Stakeholders
- Shareholders- investors in the firm, they elect directors to protect their interests, voting rights. Separation of control and ownership.
- Society (govt, tax authorities, stock market):
- Employees- devote time to the firm
- Creditors/ Suppliers: essential to the functioning of their business. Are their invoices being paid? Can they deliver to and invest in the firm in the future as well?
- Customers- purchasing power (decisions to buy or not). Large informal influence over company. Companies survive by satisfying customers needs.
- Directors ([non] executives):they must balance the wishes of all groups. Must maintain the activities of the org within the feasibility region determined but the intersecting acceptable sets of stakeholders.
- Gatekeepers/watchdogs: a) auditors b) credit agencies c) media. monitor activities of company and report on findings.
Must determine ‘feasibility space’ of where these all stakeholders interests are considered.
Backbone of a good CG?
- Transparency: Requires sophisticated system of accounting and should encourage efficient operations, allow investors to assess magnitude and timing of financial cash flows, provide warning of inabilities to meet objectives, and quick corrective actions in place.
- Integrity: doing things right.
4 Moral Standards enforced by law
- The Sup Board is to (independently) supervise the executives on behalf of the shareholders
- The external auditor should audit the corporation and provide an independent judgment
- The members of the executive board should manage the company well and demonstrate they are in control
- Whistleblowers should be protected.
Rule based vs. Principle based
SOX is based on punishment and fear imposed by politics, while the UK and Dutch codes have managed to restrain from strong regulation. The Dutch and UK codes have principles that you can either apply or not but in the latter case you must explain (AKA “Apply or explain Principle” -principle based and risk-based). The US is rule-based.
Risk appetite vs. Risk Response
Appetite: Amount of risk, and nature of risk, that an entity is willing to take in order to meet strategic objectives (should be reelected in their strategic plan and consistent with orgs mission).
Response: the orgs reaction to the identified risk posed, while considering the risk appetite.
Overall, RA is the focal point for ERM which trickles down to the decisions made for the company’s risk response.
