NAA governance day

Which of the lines of defence model below forms part of BAT’s risk landscape?

• Management

• Internal Audit

• Compliance team

What is the role of a Control Owner?

• Accountable for ensuring the Controls are operated as described and at the right frequency.

• Understanding key risks from their respective process and design of controls to mitigate them.

• Execute and operate the controls  as described in the Risk and Controls Matrix (RACM) / Task Level Description (TLD) documents / Standard Operating Procedures (SOP).

• Delegated authority from the GPO to ensure that the controls of their respective processes adequately mitigate the risk of financial misstatement.

Which of the following is not part of the group most highlighted risk based on H1 results?

• Digital

• Pricing

• Marketing

• Supply Chain

Which of the following contributes to Completeness & Accuracy guideline?

• Timeliness of the transaction & evidences

• Screenshot of Key input of parameters, date & timestamp and total report output

• Retain email evidence of approval.

Why is personal data privacy important to BAT?

• We have a legal and ethical obligation to handle people’s information properly

• If we breach data privacy laws, BAT may face a large fine and/ or suffer a loss of reputation

• It increases profits for the company