Boskalis Annual Report 2018

report of the board of management ANNUAL REPORT 2018 – BOSKALIS 60 accounting standards, guidelines and procedures. Internal audits to monitor and improve quality and discipline are conducted based on an annual audit plan and ad hoc examinations. Moreover, the quality of the fnancial control systems is evaluated regularly in the context of the activities of the external auditor. Findings concerning the quality of the fnancial control systems identifed during the audit of the fnancial statements are reported by the external auditor in the Management Letter. Further to a review of our controls over fnancial (reporting) risks, we have designed and implemented a new Financial Control Framework (FCF) that stipulates and documents the control requirements to help mitigate these risks. In doing so, the updated COSO internal control framework has been used as a standard of reference. A gap-analysis was performed to compare actual controls with these minimum control requirements. The new electronic platform containing the FCF-documentation has been made to match that of our WoW-system with the aim of optimizing its user-friendliness for our staff. INTERNAL AUDIT FUNCTION In addition to the internal audits performed under the auspices of the SHE-Q department, Boskalis has an internal audit function that mainly focusses on the company’s management and fnancial reporting processes. It is guided by the International Standards for the Professional Practice of Internal Auditing and the Code of Ethics as published by The Institute of Internal Auditors. The internal audit manager is accountable to the Board of Management, represented by the Chief Executive Offcer for day to day operations and to the Audit Committee as part of its oversight role. Appointment and dismissal of the internal audit manager will be submitted to the Supervisory Board for approval, along with a recommendation by the Audit Committee. On an annual basis the internal audit manager submits to the Board of Management and the Audit Committee a report on the activities performed in the year past, including the main fndings, as well as a risk based internal audit plan for the next year for their review and approval. Based on the internal audit plan, the internal audit manager agrees with the Board of Management the specifc audit subjects, the detailed scope of work and the allocation of resources. The internal audit function’s performance relative to its plan are regularly communicated and discussed between the Internal Audit Manager and the Board of Management, represented by the Chief Financial Offcer. The internal audit function also periodically interacts with the company’s external fnancial auditor to share information on audit planning and progress as well as key fndings and observations. The internal audit function’s fnal reports are made available to the external auditor and management letters of the external auditor will be shared with the internal audit manager.

EVALUATION OF INTERNAL RISK MANAGEMENT AND CONTROL SYSTEMS Similar to last year, the Board of Management has initiated a so-called Corporate Risk Assessment to systematically evaluate the risks inherent to the Group’s strategic business objectives as well as the related risk management and control activities. For this purpose, a comprehensive risk classifcation system was used that contains pertinent information for each of the risk categories identifed. This includes examples of – and contributing factors to – possible risk manifestations as well as current risk management and control activities to help mitigate these risks. The risk categories identifed were evaluated for their signifcance, defned as the degree to which risks within the respective risk category could adversely impact our ability to achieve our strategic objectives, as well as for the potential for improving their related risk management and control activities. Compared to the previous year, this evaluation did not identify signifcant shifts in the Company’s overall risk profle and its main results have been included in the preceding overview of the main risks we face in pursuing our business objectives. No matter how much care is taken in setting up risk management and internal control systems, they are unable to provide absolute certainty with regard to realizing the company’s objectives, nor can they preclude material mistakes, losses, fraud, or infringements of legislation and regulations. STATEMENTS REGARDING INTERNAL RISK MANAGEMENT AND CONTROL SYSTEMS With due consideration of the aforementioned inherent limitations and scope for improvement, the Board of Management is of the opinion that: ‚ ‚ the report provides sufficient insights into any failings in the effectiveness of the internal risk management and control systems; ‚ ‚ the aforementioned systems provide reasonable assurance that the financial reporting does not contain any material inaccuracies; ‚ ‚ based on the current state of affairs, it is justified that the financial reporting is prepared on a going concern basis; ‚ ‚ the report states those material risks and uncertainties that are relevant to the expectation of the company’s continuity for the period of twelve months after the preparation of the report. The structure and functioning of our risk management and internal control systems are discussed annually with the Supervisory Board.