| Governance element |
Principle/s |
Summary recommendation/s |
Difference to King II |
|---|---|---|---|
| Chapter 2. Boards and directors |
|||
| Role and function of the board |
2.13. The board should report on the effectiveness of the company’s system of internal controls |
Refer to chapters 7 and 9 |
Similar to King II but implications are broader considering new King III recommendations |
| Chapter 3. Audit committees |
|||
| Internal assurance providers |
3.8. The audit committee should be an integral component of the risk management process |
The audit committee should specifically have oversight of:
|
New requirement |
| Chapter 3. Audit committees |
|||
| Reporting |
3.10. The audit committee should report to the board and shareholders on how it has discharged its duties |
In reporting to the shareholders on its statutory duties, the audit committee must report on (amongst others):
|
New requirement |
| Chapter 4. The governance of risk |
|||
| The board’s responsibility for risk governance |
4.1. The board should be responsible for the governance of risk |
A policy and plan for a system and process of risk management should be developed. The board should comment in the integrated report on the effectiveness of the system and process of risk management. |
Similar to King II but implications are broader considering new King III recommendations |
| Risk assurance | 4.9. The board should receive assurance regarding the effectiveness of the risk management process | Internal audit should provide a written assessment of the effectiveness of the system of internal controls and risk management to the board. | Similar to King II but implications are broader considering new King III recommendations |
| Chapter 7. Internal audit |
|||
| 7.3. Internal audit should provide a
written assessment of the effectiveness
of the company’s system of internal
controls and risk management |
Internal audit should form an integral part of the combined assurance model as internal assurance provider. Internal controls should be established not only over financial matters, but also operational, compliance and sustainability issues. Companies should maintain an effective governance, risk management and internal control framework. Internal audit should provide a written assessment of internal controls and risk management to the board. Internal audit should provide a written assessment of internal financial controls to the audit committee. Management should specify the elements of the control framework. |
New requirement |
|