1. 3.3.1 Board of internal auditors
      2. 3.3.2 Independent auditor
      3. 3.3.3 Internal control
      4. 3.3.4 Security and anti-corruption
      5. 3.3.5 Risk management

For the operation of the site, we collect cookies, information about the IP address and location of users. If you do not want this data to be processed, please leave the site.

3.3.3 Internal control

The Company’s internal control system is an integral element of the Company’s governing system, focused to ensure reasonable guarantees that the goals below are achieved:

The internal control system is risk-oriented, its control procedures were shaped by risks and set in a way to ensure reasonable guarantee of an efficient and timely response to risks. The ICS covers all lines of Company’s operations, with all processes regularly controlled at all management levels, under the “three lines of defense” model. The first line of defense is management bodies (sole and collegiate executive bodies) and units in charge of control procedures due to their duties. The second line of defense is the Company’s control units. The third line of defense is internal audit units.

Functions of the system players are stipulated by the Company’s Internal Control Policy (80), Regulations on the structural units and job descriptions. The Internal Control Policy stipulates goals, operational principles and elements of the ICS, primary functions and responsibilities of ICS participants, ICS efficiency assessment procedure. The Company enforces the Procedure of implementation of the Internal Control Policy, disclosing practical aspects related to application of the norms, set by the Internal Control Policy. Control procedures on core and auxiliary processes, subprocesses and governance processes are stipulated by control and risk matrices. The Company has approved ICS improvement plans and enforces them (81).

To guarantee the ICS efficiency and compliance with changing requirements and conditions, the Company’s internal auditor evaluates efficiency of the system. The ICS maturity level in 2018 has not changed on 2017 and is assessed as “Optimal” (2017 – 4.8 points, 2018 – 5.2 points). External independent assessment of the internal control system as of 31.12.2018 was conducted by OOOLimited Liability Company Ernst & Young – Assessment and Consulting Services and OOOLimited Liability Company RSM RUS (82).

During the reported period, the Company has implemented a range of key measures focused on ICS improvement, incl.:

The Internal Audit Department is a unit, liable for internal audit. The Internal Audit Department is responsible to the Company’s Board of Directors. This means that the Board of Directors oversees and administers the unit (namely, adoption of the unit’s action plan, progress report, its budget as well as assignment, dismissal and remuneration of the unit head). The goal of internal audit is to assist the Board of Directors and executive bodies of the Company in enhancing efficacy of governance and improving its financial and economic performance, by enforcing systematic and coherent approaches to analysis and evaluation of the systems of risk management, internal control and corporate governance as instruments of reasonable assurance in Company’s goal achievement.

Goals and objectives, principles of IA rollout and functioning, functions and authorities of the internal audit are stipulated by the Internal Audit Policy (83). Internal audit performance is regulated by the Internal Audit Policy and Internal Auditor Ethics Code (83), Regulations on the OAOOpen Joint-Stock Company IDGCInterregional Distribution Grid Company of Urals Internal Audit Department (84), Guarantee and Enhanced Quality of Internal Audit Program (85), Internal audit standards and standards of practical application, developed to comply with the International Professional Internal Audit Standards.

The Board of Directors Audit Committee evaluates the efficiency of internal audit. The Committee’s feedback is delivered to the head of the internal audit unit through the head’s interaction with the Committee, incl. analysis of resolutions/ recommendations of the Committee on matters falling under the competence of the internal audit unit and questionnaire survey of the Committee members. Satiation of the Audit Committee with the performance of the internal audit unit (average weighted total points from the questionnaires / quantity of votes Committee members) in 2018 corresponds with “compliance” estimation value. The Company has prepared and adopted the action plan with regard to development and improvement of the Company’s internal audit for 2017-2019 (86).