states that it is the responsibility of the audit committee “to review the
company’s internal financial controls and, unless expressly addressed by a separate board
risk committee composed of independent directors, or by the board itself, to review the
company’s internal control and risk management systems”. Further guidance on the audit
committee’s responsibilities is set out in the FRC’s Guidance on Audit Committees.