The following criteria describe the characteristics OSFI uses in assessing the quality of the Financial function’s independent analysis and reporting of the institution’s financial and operating results to Senior Management and the Board. The application and weighting of the individual criteria will depend on the nature, size, complexity, and risk profile of the institution and will be assessed collectively, together with the effectiveness of the Financial function’s performance, in rating its overall quality. |
Essential Elements |
Criteria |
1. Mandate |
1.1. Extent to which the function’s mandate establishes:
Clear objectives and enterprise-wide authority for its activities;
Authority to oversee effectiveness and consistency of operating units’ financial practices;
Authority to carry out its responsibilities independently;
Right of access to the institution’s records, information and personnel;
A requirement to provide analysis and recommendations on the institution’s strategic and business opportunities/changes, risk appetite, as well as on financial management information systems and business process changes needed to enhance decision-making; and
Authority to follow up on actions taken by management in response to identified issues and related recommendations.
|
1.2. Extent to which the mandate is communicated within the institution. |
2. Organization Structure |
2.1. Appropriateness of the stature and authority of the function head within the organization to enable the function to be effective in fulfilling its mandate. |
2.2. Extent to which the function head has direct access to the CEO, Senior Management and the Board (or a Board Committee). |
2.3. Appropriateness of the function’s organization structure based on the nature, size, complexity, and risk profile of the institution. |
2.4. Extent to which the function is independent of the institution’s operating units and is not involved in revenue-generating activities or the management or financial performance of a line of business or product line. |
3. Resources |
3.1 Adequacy of the function’s processes to determine the required:
Level of resources necessary to carry out responsibilities and in response to changes in the institution’s business activities and strategies, as well as its operating environment;
Qualifications and competencies of staff; and
Continuing professional development programs to enhance staff competencies.
|
3.2. Adequacy of the function’s resources and appropriateness of its collective qualifications and competencies for executing its mandate. |
3.3. Sufficiency of staff development programs. |
4. Policies, Practices and Methodology |
4.1. Adequacy of the function’s policies, practices and methodologies for collecting, analyzing and providing operating and financial information (including regulatory, tax, etc.). |
4.2. Adequacy of the function’s policies, practices and methodologies for measuring performance against objectives (e.g., using appropriate key performance indicators) and identifying adverse trends. |
4.3. Extent to which policies, practices and methodologies are aligned with strategic, capital, and liquidity management policies and practices and the Risk Appetite Framework. |
4.4. Extent to which policies, practices and methodologies are documented, communicated, and effectively implemented by the institution’s operating units. |
4.5. Extent to which analysis uses understandable formats, commentary and appropriate key performance indicators (i.e., derived from the key business drivers contained in the strategic and/or business plans, quantifiable, and both financial and non-financial in nature), as well as is structured to be timely, accurate and able to identify significant issues. |
4.6. Adequacy of the function’s capacity for preparing ad hoc analysis for Senior Management and the Board on a timely basis. |
4.7. Adequacy of the function’s policies to review its practices, methodologies, reports and key performance indicators regularly to ensure that they continue to meet the needs of the institution. |
4.8. Adequacy of the function’s policies, practices and methodologies to ensure an effective financial management information system to enable management to identify significant performance issues in a timely manner. |
5. Reporting |
5.1. Adequacy of the policies, practices and methodologies for producing the required reporting, including identified issues along with recommendations, to operating units, Senior Management, and the Board, as appropriate. |
5.2. Adequacy the policies and practices to monitor and follow up on the resolution of identified issues. |
6. Internal Audit Oversight |
6.1. Extent to which Internal Audit’s program includes reviews of the Financial function and its key controls, it has appropriate resources to carry out the reviews, and the scope and frequency of its reviews are sufficient to assess the effectiveness of the Financial function. |
6.2. Adequacy of Internal Audit’s communication of its recommendations and follow-up with respect to the Financial function. |
7. Senior Management Oversight |
7.1 Adequacy of policies and practices for Senior Management to support the Board (or Board Committee) on the:
Appointment and/or removal, performance review, compensation and succession plan of the function head;
Function’s mandate, budget and resources (staffing and skill sets); and
Function’s annual work plan including any material changes to that plan.
|
7.2 Adequacy of policies and practices to assess the effectiveness of the function, including communicating results to Senior Management and, as appropriate, the Board (or a Board committee). |
7.3 Adequacy of policies and practices to report periodically to Senior Management on issues and recommendations with escalation to the Board, as appropriate. |
7.4 Adequacy of the processes related to talent development and succession planning for function key roles. |
8. Board (and Board Committee) Oversight |
8.1 Adequacy of policies and practices for the Board (or Board Committee) to approve:
The appointment, performance review, compensation and succession plan of the head of the oversight function;
The function’s mandate, budget and resources (staffing and skill sets); and
The function’s annual work plan including any material changes to that plan.
|
8.2 Extent to which the Board (or Board Committee) receives periodic reporting on trends or pervasive risk impacting the organization. |
8.3 Extent to which the Board (or Board Committee) demonstrates an ability to act independently of Senior Management through practices such as regularly scheduled Board (or Board Committee) meetings that include sessions without Senior Management present. |
9. Relationship with Other Oversight Functions |
9.1. Adequacy of the formal integration of the Financial function's role and defined responsibility with other oversight functions as appropriate. |