The Report That Flattered Itself
A property developer publishes an annual report with a governance section that states the board has "a robust risk management framework," "strong stakeholder engagement," and "effective oversight of climate-related risks." The evidence behind these claims: a risk register that has not been updated in nine months; two investor meetings in the year, both arranged by the broker; a staff engagement survey with a 31% response rate; and a climate risk workshop held once, attended by four executives and no directors. The company has a significant development pipeline in a coastal region exposed to flooding. A major institutional investor has written asking for the basis of the climate oversight statement. The CFO wants to reply that the statements are "standard market language" and that no further detail is available. The company secretary is drafting the response and is uncomfortable.
1. Assess whether the three governance statements are supportable, and explain the risk in publishing them.
Read the worked answer
None of the three statements is supportable on the evidence described.
- "Robust risk management framework." A register untouched for nine months is not evidence of a working framework. A framework is robust if risks are identified, assessed, and acted on at an appropriate frequency. Nine months of stasis in a business with a live development pipeline suggests the register is a compliance artefact rather than a management tool.
- "Strong stakeholder engagement." Two investor meetings arranged by the broker, and a staff survey with a 31% response rate, do not support "strong." A 31% response rate tells you more about the two-thirds who did not respond than about the third who did.
- "Effective oversight of climate-related risks." One workshop, with no directors present, in a company with coastal flood exposure, is not oversight. Oversight requires the board to have considered the risk, set appetite, and monitored it. None of that is evidenced.
The risk in publishing is not merely reputational. Statements of this kind are assertions the company is accountable for. If the investor presses, or a regulator or auditor tests the claims, the company will have to either substantiate them or concede they were unsupported. The CFO's "standard market language" defence is an admission that the statements were not meant to be tested - which is precisely the problem.
2. The CFO proposes a holding response stating the statements are standard market language. Advise the company secretary on how to respond to the investor and what should change in future reporting.
Read the worked answer
The holding response should not be sent. Telling a major institutional investor that governance statements are "standard market language" confirms that the company does not stand behind its own disclosures. That is likely to escalate the investor's concern rather than close it.
Responding to the investor. The company secretary should advise a response that is honest about the current position and specific about remediation. For example: acknowledge that the climate oversight statement overstated the position; describe what oversight actually occurred (one workshop, executive-level); commit to board-level review of climate risk within a defined period; and state that future reporting will describe what was done rather than assert effectiveness. This is uncomfortable but survivable; a discovered misstatement is not.
Before the response goes out, the company secretary should establish the facts: confirm the register's last update date, the workshop attendees, and whether the board has ever set climate risk appetite. The response must be accurate, which means it cannot be drafted until those facts are confirmed.
Future reporting. Three changes:
- Describe activities and outcomes, not adjectives. "The board reviewed climate risk twice and set a flood exposure limit" is verifiable; "effective oversight" is not.
- Institute a disclosure verification process: each governance claim is signed off by the person who can evidence it, before the report is approved.
- Fix the underlying activities. A register updated quarterly, director attendance at risk workshops, and a stakeholder engagement programme with measurable reach would allow honest statements next year.
The audit committee should be told, because the same weakness may affect other disclosures.