Governance Risk & Compliance

The UHY team has accumulated most of its experience providing audit and consulting services to entities regulated by the Bank of Portugal, CMVM, and ASF, but we also develop projects for companies in other sectors.

 

The experience accumulated over recent years allows us to develop excellent projects tailored to our clients’ needs. In addition to the knowledge accumulated by the UHY team, we have specialists in the field of Information Systems available to support us in audit and consulting projects, as well as the experience and support of our international network.

Governance Risk & Compliance Services

Internal control

NOTICE NO. 3/2020 OF THE BANK OF PORTUGAL

Independent assessments (external audits) provided for in Notice No. 3/2020 of the Bank of Portugal:

  1. Article 3, No. 2, Notice No. 3/2020 of the Bank of Portugal – The Governing Body promotes periodic and independent assessments, to be carried out by an entity external to the Institution, regarding the conduct and values ​​of the Institution, which also affect the conduct and values ​​of the Governing Body itself and its committees
  2. Article 3, No. 2, Notice No. 3/2020 of the Bank of Portugal – On its own initiative, the Supervisory Body of the Institution also promotes periodic and independent assessments, to be carried out by an entity external to the Institution, regarding the conduct and values ​​of the Body itself, which may be developed in conjunction with the assessments referred to in the previous paragraph
  3. Article 29, No. 7, Notice No. 3/2020 of the Bank of Portugal – The Management Body ensures that the adequacy of the processes for obtaining, producing, and processing information implemented in the Institution, as well as the control mechanisms referred to in No. 5, are subject to periodic independent assessments, to be carried out by an entity external to the Institution
  4. Article 30, No. 4, Notice No. 3/2020 of the Bank of Portugal – The Management Body ensures that the compliance of the information flows established in the Institution with the provisions of this article is subject to periodic independent assessments, to be carried out by an entity external to the Institution
  5. Article 32, No. 8, Notice No. 3/2020 of the Bank of Portugal – The adequacy and effectiveness of the internal audit function are subject to independent assessments, to be carried out periodically, at least every five years, by an entity external to the Institution

Issuance of a supporting report supporting the opinion of the Supervisory Body described in Article 56, paragraph 1, Notice no. 3/2020 of the BdP, which includes:

  1. A clear, detailed, and well-founded opinion, expressed positively, on the adequacy and effectiveness of the Institution’s organizational culture and governance and internal control systems, within the scope of the responsibilities assigned by law to the Supervisory Body, which considers, at the reference date, in particular, the current or potential impacts of the deficiencies that remain open.
  2. Assessment of the status of implementation of the measures defined in the reference period to correct the deficiencies detected, including deficiencies in the internal financial control system and the accounting system reported by the Statutory Auditor, pursuant to Article 11.2(j) of Regulation (EU) No. 537/2014 or within the scope of other activities carried out by the latter, or identified by other entities external to the Institution, including supervisory authorities
  3. Opinion on the quality of performance and adequate independence of internal control functions, including outsourced operational tasks, pursuant to Article 36
  4. Statement on the reliability of prudential and financial reporting processes, including those carried out under Commission Implementing Regulation (EU) No. 680/2014 of April 16, 2014, during the reporting period
  5. Statement on the reliability of the processes for preparing information disclosed to the public by the Institution under applicable laws and regulations, including financial and prudential information
  6. Statement on adequate compliance by the Institution during the reporting period reference, of all duties of disclosure to the public, which result from applicable legislation and regulations and which respect the matters provided for in this Notice.

Governance Risk & Compliance Services

Other internal control projects

· Outsourcing Internal Audit Function Responsibilities


· Developing and supporting the implementation of Internal Audit Policies, Manuals, and Regulations


· Defining the Internal Audit Plan


· Executing Internal Audit Actions


· Following up on Internal Audit Recommendations


· Preparing Internal Audit Reports


· Reviewing the Internal Control System (Specific Areas)

Governance Risk & Compliance Services

Projects within the scope of compliance functions

· Outsourcing Compliance Function Responsibilities

 

· Developing and supporting the implementation of Compliance Policies and Manuals

 

· Defining the Compliance Function Activity Plan

 

· Gap analysis to identify obligations and assess exposure to regulatory non-compliance risks

 

· Developing the Company’s regulatory responsibilities checklist

 

· Supporting the implementation of the action plan for identified deficiencies within the Compliance area

Governance Risk & Compliance Services

Prevention of money laundering and terrorist financing

· Tests to support the preparation of the Supervisory Body’s Opinion for the issuance of the annual Money Laundering and Terrorism Financing Prevention Report

 

· Effectiveness Tests

 

· Tests to support the issuance of the Money Laundering and Terrorism Financing Prevention Report for entities supervised by the CMVM

 

· Effectiveness tests pursuant to Article 5 of CMVM Regulation No. 2/2020

 

· Assessment of Compliance of Internal Manuals and Policies with the legal provisions established by Law No. 83/2017 and CMVM Regulation No. 2/2020

 

· Audit of the implementation of recommendations resulting from special audits by the Bank of Portugal (Specific Determinations and Supervisory Measures, for example)

 

· Support for the implementation of the action plan for identified deficiencies within the scope of the PBCFT

 

· Creation and implementation of PBCFT Policies and Manuals

 

· Assessment of the Risk Management Model for Money Laundering and Terrorism Financing Prevention BCFT regarding the adequacy and effectiveness of the Internal Control System in its ability to comply with the Preventive Duties described in the applicable legislation, for example KYC analysis and review of suspicious transactions

Governance Risk & Compliance Services

Management risk

· Outsourcing Risk Function Responsibilities

 

· Development and support in the implementation of Policies and Manuals related to the Risk Management Function

 

· Definition of the Risk Function Activity Plan

 

· Comprehensive analysis of internal and external risks, including their identification, analysis, assessment, mitigation, monitoring, and reporting

 

· Development of the risk matrix and development of risk management strategies

 

· Review of the governance model and Internal Control System

 

· Implementation of the GRC model in accordance with applicable legislation and best practices

Governance Risk & Compliance Services

Request
GRC Proposal

Contact us and receive a proposal tailored to your needs. Our team is ready to present effective, results-oriented solutions.

 

You can quickly and easily obtain a customized solution tailored to your needs.

UHY Expertise in Governance Risk & Compliance

Our team

Our professionals combine technical knowledge, international experience, and local expertise. More than consultants, they are partners dedicated to creating solutions that generate real impact for each client.

Paulo André UHY

Paulo André

Managing Partner

antóno pedro mata

Associate Partner

Governance Risk & Compliance Insights

Most recent articles about Governance Risk & Compliance

UHY Services

Services

Audit

We guarantee accuracy, transparency, and reliability in your financial reports, strengthening the credibility of your business.

Services

Corporate Finance

Strategic support in mergers, acquisitions, valuations and investment attraction to maximize value.

Services

IT Consulting

Implementation and management of Primavera ERP solutions, optimizing processes and facilitating decision-making.

Services

ESG

We integrate environmental, social and governance practices for more responsible and sustainable companies.

Services

Governance
Risk & Compliance

Solutions that ensure regulatory compliance, risk mitigation, and good governance practices.

Services

Incentives

Identifying and managing tax incentives and benefits to support your company’s growth and innovation.

Services

IT Audit

Assessment of information systems and internal control to reinforce security and technological efficiency.

Services

Legal

Specialized legal advice to protect your interests and support strategic decisions.

Services

Outsourcing

Administrative, financial and human resources processes that allow greater focus on the growth of your business

Services

Transfer Pricing

Identification of the most appropriate Transfer Prices, optimizing the tax burden.

Services

Tax

Identification of the most appropriate Transfer Prices, optimizing the tax burden.

Services

Tailor-made solutions for you

Contact us and discover tailored solutions for your challenges.

Contact Form

Request a Governance Risk & Compliance Proposal