As we may note, principle number six of MCCG (2012) advocate proper risk management and internal control
system to be implemented by BOD to ensure the companies objectives can be achieved. Further, MCCG (2012)
recommends the following:
“The board should determine the company’s level of risk tolerance and actively identify, assess and monitor key
business risks to safeguard shareholders’ investments and the company’s assets. Internal controls are important for
risk management and the board should be committed to articulating, implementing and reviewing the company’s
internal controls system. Periodic testing of the effectiveness and ef¿ciency of the internal controls procedures and
processes must be conducted to ensure that the system is viable and robust. The board should disclose in the annual
report the main features of the company’s risk management framework and internal controls system”. In addition,MCCG recommends that companies to establish internal audit function that reports directly to Board Audit
Committee.