Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Managing resilience»C-suite and the board»Revised UK Corporate Governance Code puts the board at the heart of risk management
C-suite and the board

Revised UK Corporate Governance Code puts the board at the heart of risk management

January 24, 20241 Min Read
a board meeting in progress. A seat is empty where risk reporting should be.

The UK Financial Reporting Council (FRC) has announced important revisions to the UK Corporate Governance Code which will apply to companies with a premium listing on the London Stock Exchange, regardless of where they are incorporated.

Among a number of updates, the 2024 Corporate Governance Code makes new requirements for company board involvement in risk management.

Key changes in this area include:

‘Principle O’ of the Corporate Governance Code has been amended to make the board responsible not only for establishing, but also for maintaining the effectiveness of, the risk management and internal control framework. This change needs to be implemented by 1 January 2025.

A new element introduced in the 2024 Corporate Governance Code is contained in ‘Provision 29’. This states that ‘the board should monitor the company’s risk management and internal control framework and, at least annually, carry out a review of its effectiveness. The monitoring and review should cover all material controls, including financial, operational, reporting and compliance controls’. Provision 29 will apply to financial years beginning on or after 1 January 2026.

the 2024 Corporate Governance Code
UK
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleThe need for supply chain resilience is transforming global markets
Next Article NCSC publishes assessment of the near-term impact of AI on the cyber threat

Related Posts

An opening link in a digital chain...

The annual penetration test is obsolete

October 14, 2026
Insider threats concept.

AI and autonomous systems are the new insider threat vector that CISOs are concerned about

October 14, 2026
A masked man using a mobile phone.

Ransomware trends: increases seen in AI-driven attacks and physical threats against employees and their families

October 14, 2026
Supply chain resilience concept - a map of the world connected by a web of nodes.

Survey finds that more than half of organizations take a reactive approach to supply chain resilience

October 13, 2026
MAS logo

MAS releases Guidelines on Artificial Intelligence Risk Management

October 13, 2026
A finger points to a green tick on a box, which is next to a red cross on a box.

Resilience is an evidence problem

October 8, 2026
Advertisement
Resilience First
This week's most read articles
Signage on a Wildberries building.

Do the Wildberries attacks expand the threatscape for global retailers?

July 30, 2026
An undersea communications cable.

Various countries endorse a joint approach to the security and resilience of undersea communication cables

October 2, 2024
M365 logos

Research highlights six key risk areas related to Microsoft 365 deployments

March 10, 2026
Latest resources
MAS logo

MAS releases Guidelines on Artificial Intelligence Risk Management

October 13, 2026
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Five stage crisis management framework

A five stage framework for a crisis management process

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
Global risks concept

UN report warns that the global risk landscape is being redrawn

Three blank wooden signs against a blue sky.

System restoration is not business continuity: research finds that ‘most cyber recovery plans are built for the wrong outcome’

BCI Continuity and Resilience Report 2026 cover.

BCI report sees growing structural divide between business continuity and resilience

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?