
Corporate Governance Statement continued
the Group seeks to understand its key risks
and manage them within our risk appetite.
Twice a year the Group’s Principal Risks and
the Group Risk Appetite Framework and
Statement are reviewed by the Board. During
these reviews, the Board takes account of
the significance of any environmental, social
and governance matters to the business of
the Group, ensuring any related risks and
associated mitigation have been identified.
The risk register is a key element in our risk
management framework and is used in the
assessment and reporting of key risks being
managed by the Group. Senior management
work alongside the Risk & Compliance
function to ensure the risk register
incorporates any new risks and movements
in risks. The risk register is managed by the
Risk & Compliance function, risks and internal
controls are owned by a member of the
Executive team who is responsible for the
ongoing effectiveness assessment and the
delivery of mitigating actions. Robust risk and
control assessments are regularly carried out
across all areas of the business, in order to
understand the strength and performance
of the controls in place, and potential
gaps and weaknesses. The results of risk
register assessments together with risks
identified through other tools within our Risk
Management framework, including findings
from Internal Audit and Risk & Compliance
monitoring are reviewed on a regular basis
by the Risk Committee.
The Risk & Compliance function provides
challenge to the Executive Team in their
assessment and management of risks with
particular focus on the actions being taken to
reduce risk. Reporting to the Executive team
and Risk Committee provides clear visibility of
the most significant risks, identifies areas of
concern and/or priority, analyses root cause
and identifies underlying trends. Reporting
to the Risk Committee enables the Directors
to have clear visibility of the most significant
risks; identify areas of concern and/or
priority; and ensure actions to potentially
mitigate the impact of new risks are taken in
a timely manner.
Process for review of effectiveness
The Risk Committee is responsible for
reviewing the effectiveness of the systems of
internal controls. The steps it takes in relation
to the review are set out on page 74. The
Risk Committee makes a recommendation to
the Board on effectiveness, which the Board
considers, in forming its own view on the
effectiveness of the risk management and
internal controlsystems.
During 2021, the Chief Risk Officer was
promoted to the Executive Team, reflecting
the importance of internal control and risk
management processes to the Group. A
review of the effectiveness of the Group’s risk
management and internal control systems
was undertaken in 2021. We confirm that the
processes outlined above and on page 86
have been in place for the year under review
and up to the date of approval of this Annual
Report, and that these processes accord
with the 2018 Corporate Governance Code
and the FRC Guidance on Risk Management,
Internal Control and Related Financial
and Business Reporting (September 2016
version). We have strengthened and expect
to continue to embed enhanced controls in
respect of cyber security and data privacy. A
summary of actions we have taken in 2021
is set out in the Risk Committee Report on
pages 90 to 91. The Board has carried out
a robust assessment of the emerging and
Principal Risks facing the Group, including
those that would threaten its business
model, future performance, solvency or
liquidity and these, together with how they
are managed or mitigated, are set out on
pages 38 to 39.
Composition, succession
andevaluation
Board composition
Our Board comprises the Chair (who
was independent on appointment), six
independent Non-Executive Directors
and two Executive Directors. The details
of their career background, relevant skills,
Committee membership, tenure and
external appointments are set out on pages
66 to 67. Further details on the role of the
Chair and members of the Board can be
found on pages 73 to 74. The Chair, Senior
Independent Director and Non-Executive
Directors are appointed for a three-year
term, subject to annual re-election by
shareholders following consideration of the
annual Board effectiveness evaluation. The
composition of our Board continued to be
an area of focus this year for the Nomination
Committee to ensure that it retains the
necessary balance of skills, experience
and independence, in accordance with
the Board Diversity Policy, the statement
for which is detailed in the Nomination
Committee report. Any new appointments
to the Board result from a formal, rigorous
and transparent procedure, responsibility
for which is delegated to the Nomination
Committee, although decisions on
appointment are a matter reserved for the
Board. Further information on the work of
the Nomination Committee is on pages 80
to 83.
During 2021, the Board and Nomination
Committee have fully considered Board
succession to ensure that the Board has
the right mix of skills and experience, as
well as the capability to provide constructive
challenge and promote diversity. Additional
detail can be found within the Nomination
Committee report on pages 80 to 83.
Board training and development
Directors are continually updated on the
Group’s business, the markets in which we
operate and changes to the competitive
and regulatory environments through
presentations and briefings to the Board
from Executive Directors and senior
management.
As part of the annual individual effectiveness
evaluation, the Chair discusses training
and development requirements with each
Director so that any needs which are
identified through the formal evaluation
or during the year can be addressed. The
Company Secretary also maintains a record
of each individual Director’s training.
Directors received briefings from the
Company Secretary during 2021 on
governance and compliance matters and
relevant legislative changes. The Board
was also provided with training materials
on digital markets and regulatory and
competition law developments for UK based
providers and operators. Training was also
provided on environmental regulations and
diversity and inclusion. In addition, individual
directors receive tailored training where
beneficial or required in order for them to
adequately discharge their duties.
To ensure that Directors are able to fully
acquaint themselves with current trading
and matters requiring discussions and
decisions, comprehensive Board papers
and Committee papers are circulated
electronically approximately one week prior
to scheduled meetings.
The Directors also have available to them an
electronic ‘Resource Centre’ acting as a Board
manual which includes extensive information
including financial and analyst reports,
current and historical regulatory publications,
Group codes and policies, organisational
structure documentation, and information on
Directors’ duties.
Directors may, in the furtherance of their
duties, take independent professional advice
at the Company’s expense.
Role Name Responsibility
Non-Executive Director
Employee Champion
Sarah Warby • helping the Board to establish what channels of engagement are appropriate, in
order to gather and bring the views and experiences of the workforce into the
Boardroom;
• working with the Board to take appropriate steps to evaluate, and where possible
mitigate, the impact that the Board’s proposals and decisions may have on the
workforce;
• challenging the Executive Directors, when required, as to the way in which
workforce engagement is undertaken and the steps to be taken to address
workforce concerns arising out of business-as-usual activities; and
• giving feedback to employees, where appropriate, on steps taken to address their
concerns or explain why particular steps have not been taken.
Interim Company
Secretary
Alice Rivers • managing the provision of timely, accurate and considered information to
theBoard;
• recommending corporate governance policies and practices to the Chair and CEO;
and
• advising the Board and its Committees on corporate governance and compliance
within the Group and appropriate procedures for the management of their
meetings and duties.
Risk management and internalcontrol
The Board has overall responsibility for
setting the risk appetite of the Group,
maintaining the Group’s risk management
and internal control system and reviewing
the system’s effectiveness. We have an
ongoing process for identifying, evaluating
and managing the Principal Risks faced
by the Group which has been in place for
the year under review and up to the date
of approval of the Annual Report. The Risk
Committee and the Audit Committee assist
us in discharging these duties.
A description of the process for managing
risk together with a description of the
emerging and Principal Risks and strategies
to mitigate those risks, is provided on pages
38 to 39.
The main features of the Group’s risk
management and internal controls in respect
of financial reporting and the preparation of
accounts are:
• a comprehensive annual business
planning and budgeting process, requiring
Board approval, through which risks are
identified and appraised;
• a comprehensive financial reporting
system, regularly enhanced, within which
actual and forecast results are compared
with approved budgets and the previous
year’s figures on a monthly basis and
reviewed by the Board;
• a review of Group policies relating to
the maintenance of accounting records,
transaction reporting and key financial
control procedures;
• an investment evaluation procedure to
ensure an appropriate level of approval
for all capital expenditure and other
capitalised costs;
• monthly finance team meetings which
include reviews of internal financial
reporting issues and financial control
monitoring; and
• ongoing training and development of
financial reporting employees.
Other controls in place to manage our
business in accordance with our Risk
Appetite Framework include:
• an annual strategy meeting to discuss and
approve the Group’s strategic direction,
plans and objectives and the challenges to
achieving them;
• a schedule of matters reserved for
approval by the Board to ensure it
maintains control over appropriate
strategic, financial, organisational,
compliance and capital investment issues;
• an organisational governance structure
with clearly defined lines of responsibility
and delegation of authority;
• a formal risk management framework
with supporting policies and procedures
manuals;
• regular reviews of the Principal Risks
facing the Group to ensure they are being
identified, evaluated and appropriately
managed;
• a process for regular assessment of the
effectiveness of key internal controls
across the Group;
• a Risk & Compliance function responsible
for overseeing the implementation of the
Risk Appetite Framework;
• an Internal Audit function providing
assurance over key risks, processes and
controls; and
• a whistleblowing hotline which employees
can use to report any instances of
suspected wrongdoing.
Our internal control effectiveness is assessed
through the performance of regular checks,
which in 2021 included the following areas:
• reviewing and testing the Group’s financial
reporting processes;
• completion of the Group’s internal
auditplan;
• performing risk business partnering and
monitoring activities including financial
promotion reviews and call listening;
• assessment of the identification and
management of risks connected to the
Group’s capital investment programme;
• assessment of the Group’s processes
for identifying and mitigating potential
conflicts of interest;
• assessment of the identification and
management of technology risks across
the Group, including cyber risk, data
security and change management; and
• monitoring the completion of the Group’s
mandatory ‘Introduction to Regulation’,
data protection, cyber security and Code
of Conduct training for new starters and
refresher training for all employees.
Risk review and assessment
The Group’s systems and procedures are
designed to identify and manage and, where
practicable, reduce and mitigate the risk of
failing to achieve the Group’s objectives. They
are not designed to eliminate such risk, but
Annual Report and Accounts 2021
74
Moneysupermarket.com Group PLC
75
Strategic Report Governance Financial Statements
Contents_GEN_PageContents_GEN_Page Contents_GEN_PageL2Contents_GEN_PageL2 Contents Generation – SectionContents Generation – Section