Charities Governance Code – Principle 4: Exercising Control

CalQRisk Analysis – Inside the Charities Governance Code

Charities Governance Code – Principle 4: Exercising Control … what’s that all about?

Just like any other organisation, charities are expected to comply with all relevant legal and regulatory obligations. And while the buck ultimately stops with the trustees of the charity, as it does with the board of directors in other organisations, a charity’s staff and volunteers also have key roles to play in ensuring compliance.

While many organisations tend to view compliance as a tick-box exercise, there are many benefits to establishing and maintaining compliance with your legal and regulatory obligations:

  • Regulators will have more confidence in your organisation,
  • The public will be more likely to donate, and
  • The recruitment of trustees and volunteers may be easier too.

Below, we explain Principle 4 of the Governance Code in a little more detail and suggest what “good governance” might look like.

Where to Start?

One of the core standards under this principle is finding out the laws and regulatory requirements that apply to your charity…and complying with them! But how would you do that in practice?

Our suggested approach, outlined in the diagram below, starts out with identifying all the relevant legal and regulatory obligations. When doing this, you may need to think broader than just the Charities Regulator. For example, the General Data Protection Regulation (GDPR) is probably a concern, and some charities may have requirements from the provision of certain of their services that might make the likes of HIQA or Tusla regulations relevant. If you raise funds from the public, you will also need to review the Charities Regulator’s guidelines on this and consider how you comply with it. too.

Next, comes the gap analysis. You will need to read through each piece of regulation / legislation and identify the relevant obligations that your charity must or should comply with. And, for each obligation, you must also decide whether you comply with it or not.

And finally (and this is the part that many organisations struggle with), you will need evidence. You need to be able to demonstrate that you have done your gap analysis, identified the potential compliance issues, and put action plans in place to fix them. All of this should be backed up by periodic reporting to your senior management team (depending on the size of the organisation) and your board of directors / trustees.

Identify your Risks

Another of the core standard in Principle 4 focuses on identifying the risks your charity is exposed to and how you manage them. Again, we have suggested an approach to this in the diagram below.

Begin with a simple identification exercise – when thinking about the risks your charity is exposed to, consider the context in which you are operating:

  • What services do you provide?
  • What data do you use / collect?
  • What risks are unique to your organisation versus those that may be applicable to almost all charities?

Once you have identified all your risks, you need to identify the controls you have in place to mitigate each risk (this should help solve the “how to manage” the risks part of the core standard). When thinking about your controls, consider whether the compliance obligations you have already satisfied may also be controls that mitigate a risk. It is also worth considering your financial controls here, which satisfies yet another core standard.

Maintain a Risk Register

To finish, we suggest you maintain a risk register with all this information in it. While the maintenance of a risk register is seen as an “Additional Standard” in the Code, you may find it difficult to demonstrate your compliance with this core standard without having a risk register in place… how can you demonstrate that you have identified all of your risks and how they are being managed without one?

Conclusion

While we understand that Principle 4 contains other core standards, our suggestions above may help you and your charity to satisfy the main ones. Remember, evidence is key when trying to demonstrate compliance with any code, whether regulation or legislation.

 

To learn more about how the CalQRisk solution can assist your charity in satisfying the requirements of the Charities Governance Code (and many other relevant obligations), click here.

Recent News

Navigating Risk: A Strategic Approach to Risk Management 

In the vast ocean of business, navigating through turbulent waters demands more than just a sturdy ship; it ...
Read More

Challenges of Reporting Risk and Compliance in Multi-Academy Trusts 

In the intricate tapestry of educational governance, Multi-Academy Trusts (MATs) have emerged as model offering collaboration and shared ...
Read More

Navigating Delegate Oversight – A Balancing Act

In the fast-paced world of fund management, delegate oversight is paramount. However, this oversight comes with its fair ...
Read More

Tennis Ireland implements CalQRisk to streamline their approach to governance

Tennis Ireland have recently implemented the CalQRisk solution to transform their approach to board and committee meetings and ...
Read More

Regulatory & Supervisory Outlook Report – 5 Key Risk Topics for Credit Unions

The Central Bank of Ireland has published its Regulatory & Supervisory Outlook Report 2024 which includes the Central ...
Read More

CalQRisk shortlisted in RegTech Insight Awards

The CalQRisk solution has been shortlisted for two awards at the upcoming RegTech Insight Awards – Best Solution ...
Read More

Footprint Underwriting onboards CalQRisk for risk management and compliance

Footprint Underwriting, a leading underwriting agency in Ireland, has recently implemented the CalQRisk solution in order to enhance ...
Read More

Climate-Related & Environmental Risk Assessment Guide

A Climate & Environmental Risk Assessment Guide was issued to Risk Advisory Service subscribers in Dec 2023 following ...
Read More

Loan Product Risk Assessment Guide

The Risk Advisory Service Loan Product Risk Assessment Guide circulated recently provides a framework for conducting risk assessments ...
Read More

Risk Today – Strategic Planning

Last quarter’s Risk Today e-zine for CalQRisk’s Risk Advisory Service subscribers, focusses on how Risk Management Officers can ...
Read More