41 Declaration Ahold Annual Report 2011 Groupata glance Performance (Governance Financials Investors How we manage risk continued Ahold has developed uniform governance and control standards in areas such as ethical conduct, agreements, and accounting policies. These and other Corporate Executive Board- approved policies and procedures are incorporated into the ABC Framework as mandatory guidelines for all of Ahold's consolidated entities. Within this framework, management is responsible for local business operations, including risk mitigation and compliance with laws and regulations. Authority limits have been established to ensure that all expenditures and decisions are approved by the appropriate levels of management. Our key control requirements are documented in Ahold Control Memoranda (ACMs). Compliance with the ACMs is mandatory for all of Ahold's fully-owned entities. The ACMs cover controls relating to financial reporting and various other business processes. They include the requirement for management to assess the operating effectiveness of all key controls. Code of Conduct Our Global Code of Conduct (the "Code") was revised in 2011, and came into force early 2012. The Code focuses on the Ahold's core value "Doing what's right" and establishes Group-wide principles and rules with regard to employee conduct. It is intended to help each employee understand and follow relevant compliance and integrity rules, and know when and where to ask for advice or report a breach of the Code. The principles of the Code apply to all employees of Ahold and its operating companies, as well as to third parties hired by or acting for and on behalf of Ahold. Employees of defined grade levels acknowledge compliance with the Code. The full Code is available in the corporate governance section of Ahold's public website at www.ahold.com. Monitoring We use a comprehensive business planning and performance review process to monitor our performance. This process covers the adoption of strategy, budgeting, and the reporting of current and projected results. We assess business performance according to both financial and non-financial targets and have a Group-wide management certification process in place to meet business needs and the requirements of the Dutch Corporate Governance Code. Each quarter, executive management of each reporting entity send letters of representation to the Corporate Executive Board confirming whether they comply with Ahold's global Code of Conduct, policies on fraud prevention and detection, accounting and internal control standards, and disclosure requirements. Compliance with Ahold's corporate responsibility standards is confirmed through bi-annual letters of representation. Our Internal Audit function helps to ensure that we maintain and improve the integrity and effectiveness of our system of risk management and internal control by undertaking regular risk-based, objective, and critical audits. Internal Audit also monitors the effectiveness of corrective actions undertaken by management and has specific procedures in place for following up on significant audit findings. Governance Risk and Compliance Committee The Governance, Risk and Compliance (GRC) Committee oversees governance, risk and compliance activities within the Ahold Group and reviews relevant reports that are submitted to the Corporate Executive Board, the Supervisory Board, and the Audit Committee. The GRC Committee meets quarterly. Ahold's Chief Corporate Governance Counsel (chair) and Chief Financial Officer sit on the GRC Committee, as do other members of management responsible for key governance, risk, and compliance functions. Annual declaration on risk management and control systems regarding financial reporting risks Ahold supports the Dutch Corporate Governance Code and makes the following declaration in accordance with best practice provision II.1.5: The Corporate Executive Board is responsible for establishing and maintaining adequate internal risk management and control systems. Such systems are designed to manage rather than eliminate the risk of failure to achieve important business objectives, and can only provide reasonable and not absolute assurance against material misstatement or loss.

Jaarverslagen | 2011 | | pagina 85