BA4: Governance and CSR

Answer: A. Corporate governance is the system by which companies are directed and controlled, concerning the relationships between the board, shareholders and other stakeholders and the way the company is held accountable. It is broader than preparing financial statements, marketing, or operational management. Good governance aims to ensure companies are run effectively, ethically and in the interests of their stakeholders.

Answer: B. Agency theory describes shareholders as principals who delegate the running of the company to directors, who act as their agents. The risk that the agents' interests diverge from the principals' interests — the agency problem — is a central concern of corporate governance. The relationship is not primarily one of employer-employee, buyer-seller, or lender-borrower; the principal-agent relationship is what governance mechanisms seek to manage.

Answer: C. Non-executive directors bring independent judgement, experience and objectivity to the board, scrutinising the performance of executive management and helping to protect shareholders' interests. They do not run day-to-day operations (the executives' role), prepare tax returns, or act as external auditors. Their independence is central to their contribution, which is why governance codes set criteria for assessing it.

Answer: D. To avoid excessive concentration of power, the UK Corporate Governance Code recommends that the roles of chairman and chief executive be separated and held by different people. Combining the roles, having no chairman, or having the chief executive chair the audit committee would all weaken the balance of power and the independent oversight that governance seeks to achieve.

Answer: A. An audit committee should be made up of independent non-executive directors, so it can oversee financial reporting, internal control and the external audit free from the conflicts of interest that executives might face. It is not composed of executives, the external auditors (whose work it oversees), or shareholders. Its independence is what enables it to provide effective, objective oversight on behalf of shareholders.

Answer: B. The UK Corporate Governance Code uses a 'comply or explain' approach: companies should either comply with its provisions or explain to shareholders why they have not. This principles-based approach offers flexibility and leaves judgement to shareholders, unlike a rigid rules-based system enforced by legal penalties. It is not purely voluntary with no disclosure, nor does it rely on government inspection of companies.

Answer: C. A rules-based approach, exemplified by the US Sarbanes-Oxley Act, sets out detailed legal requirements that companies must comply with, backed by penalties. A principles-based approach instead relies on broad principles and the exercise of judgement, with flexibility through 'comply or explain'. The rules-based approach is mandatory rather than voluntary, and applies to companies regardless of size within its scope.

Answer: D. A remuneration committee, made up of independent non-executive directors, determines the pay of executive directors so that directors do not effectively set their own remuneration — avoiding a clear conflict of interest. It does not approve the financial statements, conduct the audit, or run marketing. Linking reward to performance while keeping the decision independent is a key governance safeguard.

Answer: A. Internal control systems help to safeguard assets, support reliable financial reporting and compliance, and assist in achieving the company's objectives by managing risk. They cannot eliminate risk entirely — they reduce it to an acceptable level — and they do not guarantee a higher share price or lower tax. Effective internal control is a key element of good corporate governance and risk management.

Answer: B. Internal audit is an internal function reporting to management and those charged with governance, reviewing controls and operations on an ongoing basis, whereas external audit is independent and reports to the shareholders on whether the financial statements give a true and fair view. The two differ in who they report to and in their purpose; they are distinct functions, and cost is not the defining difference.

Answer: C. Corporate social responsibility is a company's recognition of its responsibilities to society, stakeholders and the environment beyond its strict legal obligations — for example through ethical, social and environmental considerations. It is not the same as filing accounts, maximising short-term profit, or auditing. CSR is closely linked to sustainability and the idea that businesses should consider their wider impact, not only financial returns.

Answer: A. The OECD Principles of Corporate Governance provide an internationally recognised, non-binding framework that benchmarks good governance and influences national codes around the world. They are not directly binding law in every country, nor a tax scheme or an accounting standard. They help promote consistent standards of transparency, accountability and shareholder protection across different jurisdictions.

Answer: B. In a unitary board structure, executive and non-executive directors serve together on a single board with collective responsibility for the company. This contrasts with a two-tier structure, which has separate supervisory and management boards. A unitary board includes non-executives (not only executives), and shareholders do not automatically sit on it — they appoint directors to act on their behalf.

Answer: C. A two-tier structure splits governance into a supervisory board, which oversees and appoints management and often includes employee representatives, and a management board, which runs the business day to day. It is not a division between departments, between shareholders and creditors, or between auditors and accountants. The separation is intended to strengthen oversight of management.

Answer: D. The nomination committee leads the process for board appointments, considering the balance of skills, experience and diversity, and plans for succession. Setting executive pay is the remuneration committee's role, the external audit is performed by the auditors, and preparing the statements is management's responsibility. A structured, independent nomination process helps ensure the board has the right composition.

Answer: A. Risk management is the process of identifying, assessing and responding to the risks that could affect an organisation's ability to achieve its objectives, keeping them within an acceptable level. It cannot eliminate all risk, deliberately increasing risk is not its aim, and it does not hand decisions to insurers. Effective risk management supports informed decision-making and is a key part of governance.

Answer: B. COSO (the Committee of Sponsoring Organizations) developed widely used frameworks for internal control and enterprise risk management, setting out components such as the control environment, risk assessment, control activities, information and communication, and monitoring. It is not a method of calculating tax, valuing inventory, or setting exchange rates. COSO provides a structured basis for designing and evaluating internal control.

Answer: C. The risk of being unable to meet debt obligations is a financial risk, relating to the company's funding, liquidity and gearing. Reputational risk concerns damage to standing, environmental risk concerns ecological impact, and technological risk concerns systems and innovation. Identifying the type of risk helps an organisation select an appropriate response, such as reducing borrowing or improving cash management.

Answer: D. Segregation of duties divides responsibilities so that no one person controls all stages of a transaction (such as authorising, recording and custody), making fraud and error harder to commit and easier to detect. It is not aimed at production speed, tax, or advertising. It is a fundamental internal control, especially important in areas such as payments and cash handling.

Answer: A. The triple bottom line broadens performance measurement beyond financial results to include economic, social and environmental dimensions — often summarised as profit, people and planet. It is not about profit over different periods, nor purely financial figures. The concept reflects the view that organisations should account for their wider impact on society and the environment, not only their financial returns.

Answer: B. Integrated reporting brings together financial and non-financial information to explain how an organisation creates and sustains value over the short, medium and long term, considering the various 'capitals' it uses. It does not replace the audit, confine itself to environmental matters, or calculate the share price. The aim is a more complete, connected picture of performance and prospects for providers of capital and other stakeholders.

Answer: C. Mendelow's matrix maps stakeholders by their power (ability to influence the organisation) and their level of interest in its activities, guiding how each group should be managed — for example, keeping high-power, high-interest 'key players' closely engaged. It does not classify by age, income, or job title. The matrix helps prioritise stakeholder relationships when developing strategy.

Answer: A. A diverse board brings a wider range of skills, experiences and perspectives, which improves the quality of debate and decisions and helps avoid 'groupthink', where a like-minded board fails to challenge assumptions. Diversity is not about meeting frequency, does not guarantee dividends, and does not remove the need for non-executives. Governance codes increasingly emphasise diversity of thought as well as background.

Answer: B. At the AGM, shareholders exercise their governance rights — receiving the financial statements and reports, and voting on matters such as the appointment or re-election of directors and auditors and the approval of certain resolutions. They do not manage operations, prepare the accounts, or conduct the audit, which are the roles of directors, management and auditors respectively. The AGM is a key accountability mechanism.

Answer: C. Transparency means providing clear, accurate and timely information so that shareholders and other stakeholders can understand the company's position and hold it to account. Withholding information, disclosing only good news, or doing the bare legal minimum would all undermine transparency. Alongside accountability, fairness and responsibility, transparency is a cornerstone of good corporate governance.

Answer: D. Directors owe fiduciary duties to the company, including to act in good faith in what they consider to be the company's best interests and to avoid conflicts of interest. Acting in their own interests, maximising their own pay, or disregarding shareholders would breach these duties. Fiduciary duties exist because directors are entrusted with stewardship of the company on behalf of its members.

Answer: A. For internal audit to be objective and effective, it should be independent of the activities it reviews and report to the audit committee, preserving its independence from the management it scrutinises. Reporting to the team it audits would compromise that independence, and its remit covers the whole organisation, not one department. It is also distinct from external audit, which serves shareholders.

Answer: B. Risk appetite is the amount and type of risk an organisation is willing to accept in pursuit of its objectives, guiding decisions about which risks to take, reduce, transfer or avoid. It is not a measure of economy-wide risk, a rule to avoid all risk, or the cost of insurance. Defining risk appetite helps ensure that risk-taking is deliberate and aligned with strategy.

Answer: C. Insuring against a loss transfers (shares) the financial impact of the risk to another party — the insurer — in exchange for a premium. Risk acceptance means tolerating the risk, avoidance means not undertaking the activity at all, and reduction means taking action to lessen the likelihood or impact. The common 'transfer, avoid, reduce, accept' (TARA) responses help frame how each identified risk is managed.

Answer: D. Environmental reporting discloses information about an organisation's impact on the environment and its environmental performance — for example, emissions, energy and resource use, and waste. It is not about directors' pay, share prices, or tax computations specifically. Such reporting supports accountability for sustainability and is increasingly expected by investors, regulators and other stakeholders.

Answer: A. Performance-related pay, such as share options or bonuses tied to results, is designed to align directors' interests with those of shareholders, helping to address the agency problem by rewarding directors for creating shareholder value. It is not primarily a tax device, it is the opposite of a guaranteed fixed salary, and it still requires a remuneration committee to set it independently. Poorly designed schemes can, however, encourage excessive risk-taking.

Answer: B. In large companies, ownership (the shareholders) is separated from control (the directors and managers who run the business). This separation gives rise to the agency problem that corporate governance seeks to address. It does not mean the company owns its own shares, that owners and managers are the same people, or that the government is in control. Governance mechanisms exist precisely because of this separation.

Answer: C. Carroll's pyramid sets out four levels of corporate social responsibility: economic and legal responsibilities at the base, then ethical responsibilities (doing what is right and fair) and, at the top, philanthropic responsibilities (contributing to the community). It is not limited to environmental or political duties, nor does it stop at the legal level. The model illustrates how CSR extends beyond simply making profit and obeying the law.

Answer: A. The Cadbury Report addressed the financial aspects of corporate governance following a series of corporate failures and produced an influential Code of Best Practice that became the basis of the modern UK framework, later developed into the Combined Code and the UK Corporate Governance Code. It did not abolish auditors, introduce tax, or create a stock exchange. Cadbury is regarded as a landmark in the development of governance.

Answer: B. The senior independent director provides an alternative channel for shareholders if normal contact through the chairman or executives is inappropriate, and acts as a sounding board for the chairman and a counterweight where needed. The SID does not run operations, prepare the accounts, or audit them. The role strengthens board balance and shareholder access, supporting effective independent oversight.

Answer: C. Insider dealing is trading in securities on the basis of inside, price-sensitive information that has not been made public, giving the insider an unfair advantage. It is a criminal offence and a form of market abuse. Ordinary share dealing through a broker, long-term investment, and voting at meetings are all legitimate activities. Prohibiting insider dealing helps maintain confidence in the fairness and integrity of the markets.

Answer: D. Strategic risk arises from high-level decisions about the direction of the business — entering a new market or launching a major product, for example — and the possibility that the strategy is wrong or poorly executed. Operational risk concerns day-to-day processes and systems, compliance risk concerns breaching laws and regulations, and credit risk concerns non-payment. Classifying risks by type helps assign responsibility and choose responses.

Answer: A. Operational risk is the risk of loss from failures in internal processes, people, systems or from external events — for example, a system breakdown, human error or fraud. Strategic risk relates to high-level direction, reputational risk to damage to standing, and market risk to movements in market prices. Identifying operational risk focuses attention on the reliability of the organisation's processes and controls.

Answer: B. The fraud triangle identifies three conditions that commonly coincide when fraud occurs: an opportunity (often weak controls), a motivation or pressure (such as financial need), and rationalisation (the individual justifying the act to themselves). Strengthening controls reduces opportunity, the most directly controllable factor. The other options describe unrelated frameworks. The model helps organisations understand and reduce the risk of fraud.

Answer: C. Residual risk is the risk that remains after management has applied controls and responses; gross (or inherent) risk is the level before such measures. Residual risk is not the same as eliminated risk — controls rarely remove risk completely — nor is it industry-wide risk. Comparing residual risk against the organisation's risk appetite shows whether further action is needed.

Answer: D. A risk register documents the risks an organisation has identified, together with an assessment of their likelihood and impact, the controls in place, and the planned responses and ownership. It is not a shareholder list, committee minutes, or an asset schedule. Maintaining and reviewing a risk register is a practical tool for monitoring risks and ensuring they are actively managed.

Answer: A. Even a well-designed internal control system has inherent limitations: it can be overridden by management, circumvented by collusion between individuals, undermined by human error, and is subject to cost-benefit considerations — so it provides reasonable, not absolute, assurance. It cannot guarantee the prevention of all fraud, replace the external audit, or eliminate all business risk. Recognising these limits is important when relying on controls.

Answer: B. The external auditor expresses an opinion on whether the financial statements give a true and fair view (or are presented fairly) and comply with the applicable reporting framework. The opinion is not a guarantee of future profits, a certificate that the statements contain no errors at all, or investment advice. Audit provides reasonable assurance based on testing, which is why it is an opinion rather than a guarantee.

Answer: C. The stakeholder view holds that a company has responsibilities to a range of stakeholders — employees, customers, suppliers, communities and the environment — and not solely to its shareholders. This contrasts with the shareholder (or shareholder primacy) view, which prioritises returns to owners. Ignoring key groups or pursuing short-term profit regardless of consequences would conflict with the stakeholder perspective, which underpins much CSR thinking.

Answer: A. Sarbanes-Oxley was enacted following major corporate scandals and collapses — most notably Enron and WorldCom — to strengthen corporate governance, internal control and the reliability of financial reporting in the United States. It was not a response to an accountant shortage, interest rates, or the adoption of international standards. It represents a rules-based, legally enforced approach to governance, in contrast to the UK's principles-based code.

Answer: B. The board is collectively responsible for the long-term success of the company, including setting its strategic direction, overseeing management's implementation of that strategy, and ensuring sound risk management and control. The external audit is the auditor's role, day-to-day bookkeeping is operational, and the board represents the company as a whole rather than one interest group. Strategic leadership and oversight are central board duties.

Answer: C. To reinforce accountability to shareholders, governance codes recommend that directors stand for re-election at regular intervals — annually for many listed companies. Directors are not appointed for life, can be removed by shareholders, and are not selected by the auditors. Periodic re-election gives shareholders a regular opportunity to assess directors' performance and hold them accountable.

Answer: D. A director with a personal interest in a proposed transaction has a duty to declare that interest and should generally refrain from voting on the matter, to avoid a conflict between their personal interest and their duty to the company. Concealing the interest, automatically resigning, or pushing the transaction through would all be inappropriate. Managing conflicts of interest openly is a key part of a director's fiduciary duties.

Answer: A. Compliance risk is the risk of legal or regulatory sanctions, financial loss or reputational damage arising from a failure to comply with laws, regulations or standards. Market risk concerns adverse movements in market prices, liquidity risk concerns meeting obligations as they fall due, and strategic risk concerns high-level direction. Effective compliance arrangements help organisations identify and meet their legal and regulatory obligations.

Answer: B. Reputational risk is the risk of damage to an organisation's brand, image and standing among customers, investors and the wider public, which can follow scandals, poor conduct or service failures. Credit risk concerns non-payment, interest rate risk concerns rate movements, and operational risk concerns internal process failures. Reputational damage can have severe and lasting financial consequences, which is why ethics and conduct matter commercially as well as morally.

Answer: C. Risks are typically assessed by combining their likelihood (how probable they are) and their impact (how serious the consequences would be), often plotted on a risk map or matrix to prioritise attention. High-likelihood, high-impact risks demand the most urgent response. Age, appearance, or department alone do not determine priority. This likelihood-impact assessment guides where to focus risk management effort.

Answer: D. The control environment is the foundation of internal control: the overall attitude, awareness and actions of the board and management toward control and ethical conduct, setting the 'tone at the top'. It is not merely physical security, external conditions, or marketing. A strong control environment, where leaders model integrity and value control, makes the other components of internal control far more effective.

Answer: A. The audit expectations gap is the difference between what users of financial statements believe an audit provides — for example, a guarantee against all fraud or future failure — and what auditors actually do and are responsible for, which is to give reasonable assurance that the statements give a true and fair view. It is not about fees, internal versus external reports, or share prices. The gap can lead to misplaced reliance and criticism of auditors.

Answer: B. The widely used definition describes sustainable development as meeting the needs of the present without compromising the ability of future generations to meet their own needs, balancing economic, social and environmental considerations. It is not about maximising short-term profit, avoiding all resource use, or focusing only on the environment. The concept underpins corporate sustainability and much CSR and reporting practice.

Answer: C. Institutional investors hold significant stakes and can promote good governance by exercising their voting rights, engaging in dialogue with boards, and holding directors to account — sometimes described as stewardship. Disengaging, automatically selling, or ignoring governance would forgo this influence. Because they invest on behalf of many individuals, institutional investors are increasingly expected to act as responsible, active owners.

Answer: D. The Nolan principles set out seven standards expected of those in public life: selflessness, integrity, objectivity, accountability, openness, honesty and leadership. They are about ethical conduct in public office, not commercial objectives, economic concepts, or general management functions. The principles are widely referenced in public-sector governance and ethics and influence expectations of conduct more broadly.

Answer: B. The chairman leads the board, sets its agenda, and ensures it operates effectively — including that directors receive accurate information and that adequate time is given to important issues. Day-to-day operations are the chief executive's responsibility, the audit is the auditor's, and pricing is operational. Separating the chairman's leadership of the board from the chief executive's running of the business is a key governance recommendation.

Answer: C. Shareholders can generally remove a director from office by passing an ordinary resolution (a simple majority), subject to proper notice and procedure. The external auditor, the company secretary acting alone, and customers have no such power. This right is an important accountability mechanism, allowing the owners of the company to remove directors in whom they have lost confidence.

Answer: D. Market abuse covers conduct that undermines the integrity of financial markets, including insider dealing (trading on inside information) and market manipulation (such as creating a false impression of price or demand). Publishing reports, paying dividends and holding meetings are all legitimate activities. Laws against market abuse aim to ensure markets are fair and that all investors have access to the same material information.

Answer: A. Credit risk is the risk that a borrower, customer or counterparty will default on amounts owed, causing financial loss. Operational risk concerns internal process failures, strategic risk concerns high-level direction, and reputational risk concerns damage to standing. Managing credit risk involves measures such as credit checks, credit limits and monitoring of receivables, and it is especially important for businesses that sell on credit or lend money.

Answer: B. Liquidity risk is the risk that an organisation is unable to meet its short-term financial obligations as they fall due, even if it is profitable overall, because it lacks accessible cash. Lower profits, loss of market share and new legislation are different types of risk. Managing liquidity — through cash flow forecasting and access to funding — is vital, since a liquidity crisis can threaten an otherwise viable business.

Answer: C. Choosing not to engage in an activity because the risk is unacceptable is risk avoidance — the risk is removed by not undertaking the activity. Acceptance means tolerating the risk, transfer means passing the financial impact to another party (such as an insurer), and reduction means taking action to lessen the likelihood or impact. Avoidance may, however, mean forgoing the potential rewards of the activity as well.

Answer: D. The audit committee monitors the integrity of the financial statements, reviews the company's internal control and risk management systems, and oversees the relationship with the external auditors, including their independence and effectiveness. Pricing, advertising and wage negotiation are operational matters outside its remit. Composed of independent non-executive directors, the audit committee provides crucial oversight of financial reporting and control.

Answer: A. Corporate governance seeks to align the interests of management with those of shareholders and other stakeholders — reducing the agency problem — and to ensure the company is directed and controlled responsibly and accountably. Maximising directors' pay, avoiding disclosure, or concentrating power would all run counter to good governance. The overarching aim is effective, accountable and transparent stewardship of the company.

Answer: B. Sustainability reporting discloses information about an organisation's economic, environmental and social impacts and performance, helping stakeholders understand how it is managing its wider responsibilities. It is not limited to share prices, and it is certainly not about directors' holidays or internal communications. Such reporting, sometimes guided by recognised frameworks, supports accountability and transparency on environmental, social and governance matters.

Answer: C. A proxy is a person appointed by a shareholder to attend a general meeting and vote in their place, enabling shareholders who cannot attend in person to still exercise their votes. It is not a car, a class of share, or a financial statement. Proxy voting is an important means by which shareholders, especially smaller or distant ones, can participate in company decisions and governance.

Answer: D. Business risk stems from the nature of the company's operations and the commercial environment in which it trades — factors such as competition, demand, costs and the economy. It is distinct from financial risk, which arises from how the company is financed (its gearing and ability to service debt). It is not driven solely by accounting standards or individual customer preferences. Understanding business risk helps in assessing overall risk.

Answer: A. Effective corporate governance tends to increase investor confidence, lower the cost of capital, and support long-term, sustainable value creation by promoting accountability, transparency and sound risk management. It is associated with stronger, not weaker, internal control, and with a reduced likelihood of fraud and corporate failure. The benefits of good governance extend beyond compliance to the company's reputation and performance over time.