Internal control over financial reporting

Monitoring is a process that assesses the quality of Finnlines’ system of internal control and its performance over time. Monitoring is performed both on an ongoing basis, and through separate evaluations including internal, external and quality audits. The business unit is responsible for ensuring that relevant laws and regulations are complied with in their respective responsibility areas.

The Internal Audit function assists the President and CEO and the Board of Directors in assessing and assuring the adequacy and effectiveness of internal controls and risk management by performing regular audits in the Group’s legal entities and support functions according to its annual plan. Finnlines’ external auditor and other assurance providers such as quality auditors conduct evaluations of the Company’s internal controls.

The Company’s financial performance is reviewed at each Board meeting. The Board reviews all interim and annual financial reports before they are released. The effectiveness of the process for assessing risks and the execution of control activities are monitored continuously at various levels. This involves reviews of results in comparison with budgets and plans. Responsibility for maintaining an effective control environment and operating the system for risk management and internal control of financial reporting is delegated to the President and CEO. The internal control in the Company is based on the Group’s structure, whereby the Group’s operations are organised into two segments and various business areas and support functions. Group functions issue corporate guidelines that stipulate responsibilities and authority, and constitute the control environment for specific areas, such as finance, accounting, and investments, purchasing and sales.

The Company has a compliance program. Standard requirements have been defined for internal control over financial reporting. The management expects all employees to maintain high moral and ethical standards and those expectations are communicated to the employees through internal channels.

The Group Finance & Control unit monitors that the financial reporting processes and controls are being followed. It also monitors the correctness of external and internal financial reporting. The external auditor verifies the correctness of external annual financial reports.

The Board monitors the statutory audit of the financial statements and consolidated financial statements, evaluates the independence of the statutory auditor or audit firm, particularly the provision of related services to the Company and prepares the proposal for resolution on the election of the auditor.

The Board reviews annually the description of the main features of the internal control and risk management systems in relation to the financial reporting process, which is included in this Corporate Governance Statement.