Organizations in various industries and of all sizes are under pressure to demonstrate how they identify, manage and report on sustainability risks and opportunities. This includes consideration of a wide array of issues such as climate change, diversity and social justice which are redefining value creation and organizational success. The need to align how to manage sustainability risks with reporting has made the concept of integrated thinking more relevant.
A recently published paper from the Institute of Internal Auditors (IIA) and COSO looks to demonstrate that organizational leaders must look to understand and embrace the concept of integrated thinking, a holistic mindset, to face the enormous challenge in establishing a complex, sophisticated, and mature internal control and governance practice that is truly sustainable.* As organizations seek ways to address the enterprise-wide nature of ESG, this is a perfect time to employ an integrated solution that takes into account the programs and methods in place to enhance, rationalize, optimize and align these programs to address ESG challenges and expectations.
An integrated approach should look at the application of integrated thinking through four different frameworks and draws on the parallels of each framework. Lastly, the paper demonstrates how an internal audit function is in a unique position to facilitate this type of thought process and be able to provide objective and independent assurance to add value in the assessment of sustainability governance, risk management, and controls.
Drawing parallels for four frameworks
Integrated thinking is described by the Integrated Reporting Framework as “the active consideration of the relationship between its various operating and functional units that the organization uses or affects.” * It leads to integrated decision-making and the creation of value over the short, medium, and long term”. The paper draws on four frameworks: COSO, ERM, the IIA’s Three Lines Model, and the International Integrated Reporting Framework. It outlines the relationship among all frameworks and the application of integrated thinking when identifying, assessing, and managing sustainability risks.
Specifically:
- The three lines model provides a framework to set the overall sustainability governance of an organization. It defines how accountability, actions, and assurance should operate within the organization, who should perform these activities, and who should provide oversight.
- The COSO Internal Control and ERM Frameworks splits a company into more manageable components for which an integrated thought process can be applied to. There is a focus on sustainability controls and risks being faced in each component.
- The Integrated Reporting Framework provides organizational leaders a tool to monitor and report on an organization that is based on value creation. This allows management to be able to appropriately monitor the controls that have been created to support sustainability governance, risk management, controls, and processes.
Internal audit is uniquely positioned to support
The internal audit function should play a significant role in an organization’s ESG journey as an advisor helping identify and establish a functional ESG control environment. Internal audit functions have a unique opportunity to be an independent, assurance provider familiar with all aspects, including nonfinancial, of the organization’s sustainability journey. Here are some activities that internal audit functions can do that help facilitate integrated thinking and supporting the implementation of sustainability processes and controls:
- Broker strong relationships with different internal and external stakeholders.
- Provide assurance on the content, design, and implementation of controls used to address sustainability risks. This includes advising on the establishment of key metrics and reporting mechanisms.
- Support management in determining whether sustainability risks that may impact external stakeholder evaluation and value creation have been sufficiently addressed.
How can this be applied?
The paper outlines how the four frameworks can be leveraged to provide a holistic approach in understanding how sustainability risks manifests across all areas of the organization and the critical relationship between sustainability and long-term organizational success.
Integrating sustainability risks and controls is a complex challenge, and this paper provides a starting point by providing a practical application to managing a pervasive risk. Internal audit contributes the essential ingredient of independent and objective assurance and advice which adds value by providing the governing body with critical assessments of governance, risk management and controls.
*Source: Integrated Thinking and Sustainability--Applying Key Governance Tools and Frameworks
