Internal audit follows the International Standards for the Professional Practice of Internal Auditing issued by the Institute of Internal Auditors. The operating principles of internal audit have been defined in the Internal Audit Charter approved by the Board of Directors and the Board monitors and assesses the effectiveness of the internal audit together with the Audit Committee. The Audit Committee approves annually the Internal Audit function’s audit plan and budget which form the framework for the Internal Audit function’s operations.
Internal audit work is independent and objective. Strategic focus areas and related risks of UPM businesses and functions are the key inputs for audit engagements. Internal audit identifies synergies, shares best practices and recommends improvements to operational efficiency. The scope of internal audit covers all businesses, functions, units and processes of the UPM Group.
In addition, Internal Audit function manages the Report Misconduct channel and the related investigation process of alleged misconducts, and reports to the Audit Committee on submissions under this channel quarterly.
The Internal Audit function operates administratively under the President and CEO and functionally under the Audit Committee and reports on conducted audits and related findings and recommendations to the Audit Committee, the President and CEO, the CFO, the management of the audited operations, and the external auditor. In addition, the Head of Internal Audit attends all Audit Committee meetings, and has quarterly sessions with the committee members without other members of management present.
You may report your complaints or concerns relating to violations against the UPM Code of Conduct or any company policies thereunder to the head of internal audit and security director through this channel.