Part of the Financial consolidation series.
Provision 29 of the UK Corporate Governance Code requires the board to declare whether material controls have operated effectively as at the balance sheet date. For a December year-end company, the first declaration relates to 31 December 2026. The external auditor will not opine on that statement, so the evidence base has to be built inside the finance function - and for a group, the controls that carry most of the weight sit in the consolidation.
When does Provision 29 first apply, and what does the board actually declare?
Provision 29 applies to accounting periods beginning on or after 1 January 2026, according to the FRC. A December year-end company therefore makes its first declaration in the 2026 annual report, with the statement of effectiveness made as at 31 December 2026. The FRC specifies that the board must describe any controls that 'have not operated effectively' and 'the action taken, or proposed, to improve'. The review covers 'financial, operational, reporting and compliance controls' - it is not limited to financial reporting alone.
What does the auditor actually do with the Provision 29 statement?
The auditor reads and considers the Provision 29 statement under ISA (UK) 720 but goes no further. The FRC's June 2026 Provision 29 mythbuster is explicit: the auditor's opinion 'does not cover the Provision 29 statement' and the auditor 'is not required to test the design, implementation and operating effectiveness of the material controls'. The FRC also makes clear that the board's material controls and the auditor's controls 'are not identical and serve different purposes'. The practical consequence is direct: the board cannot point to the audit as its evidence. Management has to construct and maintain that evidence independently.
How many material controls should a group identify?
The FRC's January 2026 guidance states that 'The FRC will not suggest a number of material controls'. The FRC observed that companies it engaged with during consultation mostly landed between 30 and 50 controls - this is the FRC's reported observation, not a target or benchmark. The FRC also confirms that controls need not be listed in the report and that the statement should in most cases be no longer than two pages. The judgment on scope belongs to the board, calibrated to the complexity of the business.
Which group close and consolidation controls are candidates for 'material'?
For a group with multiple reporting entities, the consolidation is where systemic failures in financial reporting originate. The following close and consolidation controls are strong candidates for inclusion in the material controls framework.
| Control area | What the control addresses |
|---|---|
| Entity submission and sign-off | Each subsidiary's trial balance and supporting pack is submitted by a defined deadline and signed off by a local finance director or controller. A late or unsigned submission is a control exception. See also the group month-end close checklist. |
| Intercompany agreement | Intercompany balances are agreed between counterparties before consolidation journals are posted. Unreconciled positions above a defined threshold are escalated. Background on the exposure is at why intercompany reconciliation matters. |
| Top-side journal approval | Journals posted at group level outside the standard consolidation entries require approval by a named senior finance officer, with supporting documentation retained. |
| Mapping and chart-of-accounts changes | Any change to the group chart of accounts or entity-to-group mapping is subject to a documented approval and impact assessment before the period in which it takes effect. The complexities are described in consolidating entities with different charts of accounts. |
| FX rates | The source, approval, and lock-down of exchange rates used for translation are controlled and documented at group level each period, with a record of who approved the rates and when. |
Where AI-assisted tools are used in any of these steps, the governance and audit trail requirements remain the same - the control owner is still accountable and the evidence standard does not change. AI governance and the finance audit trail covers this in more detail.
What evidence can the board actually rely on?
Because the auditor's work does not extend to material controls, the board's evidence base has to come from management-led testing: control self-assessments, walkthrough documentation, exception logs, and remediation records. The board should be able to point to a documented testing programme with clear ownership, a schedule showing which controls were tested in which period, and a record of exceptions found and resolved. A single year-end sweep is unlikely to be sufficient; controls that operate monthly need evidence across the year.
What should the declaration say when a control has failed?
The FRC's requirement is specific: describe the control, state that it did not operate effectively, and set out the action taken or proposed to improve it. A board that identifies a control failure and discloses it clearly, with a credible remediation plan, is doing exactly what the Code expects. The declaration is not a clean-bill-of-health exercise - it is a governance statement, and candour on failures is part of the framework. A board that cannot point to any control weaknesses during the year should be confident its testing programme was genuinely robust before making that claim.
What does a late or unsigned subsidiary submission mean for the declaration?
A subsidiary that submits its pack late, or whose finance director does not sign off the submission, is a control exception against the entity submission and sign-off control. If this happened at or close to the balance sheet date, it is a candidate for disclosure under Provision 29. The practical step is to document the exception, record the remediation (for example, a subsequent sign-off with a documented explanation of delay), and carry that evidence forward into the board's assessment. Recurring late submissions across several entities point to a systemic control weakness that is harder to remediate by disclosure alone.
Common questions
When does Provision 29 first apply to a December year-end company?
Provision 29 applies to accounting periods beginning on or after 1 January 2026, according to the FRC. A December year-end company therefore makes its first Provision 29 declaration in its 2026 annual report, with effectiveness assessed as at 31 December 2026.
Does the external auditor test or opine on the Provision 29 material controls statement?
No. The FRC's June 2026 Provision 29 mythbuster states that the auditor's opinion 'does not cover the Provision 29 statement' and that the auditor 'is not required to test the design, implementation and operating effectiveness of the material controls'. The auditor only reads and considers the statement under ISA (UK) 720. The board's evidence therefore has to come from management.
How many material controls should a company identify under Provision 29?
The FRC's January 2026 guidance states that 'The FRC will not suggest a number of material controls'. The FRC observed that companies it engaged with during its consultation mostly landed between 30 and 50 controls, though this is an observation rather than a target. The FRC also confirms that controls need not be listed in the annual report and that the statement should in most cases be no longer than two pages.
What must the board say if a material control did not operate effectively?
The FRC requires the board to describe any controls that 'have not operated effectively' and to set out 'the action taken, or proposed, to improve' them. A clear disclosure of a control failure, coupled with a credible remediation plan, is consistent with what the Code expects. Identifying no weaknesses at all carries an implicit assertion that the testing programme was sufficiently robust to detect them.
Which group consolidation controls are most likely to qualify as material controls under Provision 29?
For a group, the controls that carry the most weight in financial reporting are those governing the consolidation: entity submission and sign-off, intercompany balance agreement, top-side journal approval, chart-of-accounts mapping changes, and the approval of FX translation rates. A failure in any of these at or near the balance sheet date is a candidate for disclosure in the Provision 29 statement.