Corporate Governance Report

Chapter in PDF

Internal control over financial reporting
Internal control over financial reporting

The Board is responsible for the internal controls according to the Swedish Companies Act and the Code. The purpose of this report is to provide shareholders and other interested parties with an understanding of how internal control is organized at Volvo with regard to financial reporting. The description has been designed in accordance with the Swedish Annual Accounts Act and is thus limited to internal control over financial reporting.

Volvo primarily applies internal control principles introduced by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).

Volvo has a specific function for internal control. The objective of the Internal Control function is to provide support for management, allow­ing them to continuously provide solid and improved internal controls relating to financial reporting. Work that is conducted through this function is primarily based on a methodology that aims to ensure compliance with directives and policies, and to create effective conditions for specific control activities in key processes related to financial reporting. The Audit Committee is informed of the results of the work performed by the Internal Control function within Volvo with regard to risks, control activities and follow-up on the financial reporting.

Volvo also has a Corporate Audit function with the primary task of independently monitoring that companies in the Group follow the principles and rules that are stated in the Group’s directives, policies and instructions for financial reporting. The head of the Corporate Audit function reports directly to the CEO, and to the Group’s General Counsel and the Board’s Audit Committee.

Control environment
Fundamental to Volvo’s control environment is the business culture that is established within the Group and in which managers and employees operate. Volvo works actively on communications and training regarding the company’s basic values as described in The Volvo Way, an internal document concerning Volvo’s business culture, and the Group’s Code of Conduct, to ensure that good morals, ethics and integrity permeate the organization.

The foundation of the internal control process relating to the financial reporting is based on the Group’s directives, policies and instructions, as well as the responsibility and authority structure that have been adapted to the Group’s organization to create and maintain a satisfactory control environment. The principles for internal controls and directives and policies for the financial reporting are contained in Volvo Financial Policies & Procedures (FPP), an internal document comprising all important instructions, rules and principles.

Risk assessment
Risks relating to financial reporting are evaluated and monitored by the Board through the Audit Committee inter alia through identifying what types of risks that typically could be considered as material and where they would typically occur. The annual evaluation of internal control activities conducted by the Internal Control and Corporate Audit functions, is based on a risk-based model. The evaluation of the risk that errors will appear in the financial reporting is based on a number of criteria. Complex accounting principles can, for example, mean the financial reporting risks being inaccurate for those posts that are covered by such principles. Valuation of a particular asset or liability according to various evaluation criteria can also constitute a risk. The same is true for complex and/or changing business circumstances.

Control activities
In addition to the Board of AB Volvo and its Audit Committee, the management groups and other decision-making bodies in the business areas, Group Functions and Group companies constitute overall supervisory bodies.

Several control activities are applied in the ongoing business processes to ensure that potential errors or deviations in the financial reporting are prevented, discovered and corrected. Control activities range from review of outcome results in management group meetings to specific reconciliation of accounts and anal-yses of the ongoing processes for financial reporting.

Responsibility for ensuring that control activities in the financial processes are appropriate and in accordance with the Group’s policies and instructions are compiled in the Group’s financial reporting function. The Group’s shared service center is responsible for the performance of control activities including the responsibility for ensuring that authority structures are designed in accordance with good internal control so that one person cannot perform an activity and then perform the control of the same activity. Control activities within IT security and maintenance are a key part of Volvo’s internal control over financial reporting.

Information and communication
Policies and instructions relating to the financial reporting are updated and communicated on a regular basis from management to all affected employees. The Group’s financial reporting function has direct operating responsibility for the daily financial reporting and works to ensure a uniform application of the Group’s policies, principles and instructions for the financial reporting and to identify and communicate shortcomings and areas of improvement in the processes for financial reporting.

Ongoing responsibility for follow-up rests with the Group’s financial reporting function. In addition, the Corporate Audit and the Internal Control functions conduct review and follow-up activities in accordance with what is described in the introduction of this report. More specifically, the Internal Control function runs and coordinates evaluation activities through the “Volvo Group Internal Control Programme,” with the purpose of systematically evaluating the quality of the internal control over financial reporting on an annual basis. An annual evaluation plan is established and presented to the Audit Committee. This evaluation program comprises three main areas:

1. Group-wide controls: Self-assessment procedure carried out by management teams at business area, Group Function and company levels. The main areas evaluated are compliant with the Group’s financial directives and policies found in FPP, The Volvo Way and the Group’s Code of Conduct.

2. Process controls at transaction level: Processes related to the financial reporting are evaluated by testing procedures/controls based on a framework for internal control over financial reporting, Volvo Internal Control Standards (VICS). The framework focuses on the financial reporting areas deemed to have a relatively higher risk for potential errors due to factors such as complex accounting principles, complex or changed business operations.

3. General IT controls: Processes for maintenance, development and access management of financial applications are evaluated by testing procedures and controls.

The results of the evaluation activities are reported to Group management and the Audit Committee.


Gothenburg, February 21, 2014

AB Volvo (publ)

The Board of Directors