Provision 29: tackling governance and engagement
A poll in March of our risk leader network revealed that 50% of companies have defined their approach to Provision 29 of the updated UK Corporate Governance Code. Notably, some organisations are even planning to issue their disclosure ahead of schedule.
1. Continuous engagement
Rather than relying on a single, year-end update to the Audit and Risk Committee (ARC) and board on the effectiveness of material controls, risk leaders are increasingly adopting a model of continuous engagement.
The benefit of this ‘little and often’ approach is that it provides leadership with greater confidence in the final declaration. By being involved throughout the annual cycle, they are better positioned to help shape the declaration before the reporting deadline.
For example, one company in our membership has added a standing item to their quarterly risk committee meetings on progress towards Provision 29. This ensures it remains a formal priority every time they meet with senior management.
2. Reporting and delegation
Risk and assurance leaders are taking different approaches to reporting on controls to the ARC and board. While some of our members prefer frequent, light-touch reporting, others opt for a more detailed and comprehensive overview with longer intervals.
An important consideration underpinning their approaches is ensuring reports are digestible for time-poor executives and members of the board. This has led to some organisations keeping their risk and control papers separate, so that material controls updates are distinct from regular risk reporting.
Ultimately, the focus is dictated by leadership priorities around material controls. As one risk leader noted at a recent collaboration, it’s the substance of the controls that really matters to their board. Clear delegation of other tasks, such as asking Legal to formulate the wording of the final declaration, can allow additional focus to be applied in the right areas.
Hear insights from peer at our upcoming and on-demand 30-minute talks:
On demand:
|
What's next?
The prevailing sentiment among risk leaders is that Provision 29 is a progression of Provision 28, not a total revolution. By prioritising the substance of controls and maintaining a high-frequency feedback loop with the ARC and board, organisations are well positioned to meet the new standards.
Through continuous engagement, targeted education, and streamlined reporting, companies are aiming to make the 2026/27 reporting cycle a natural extension of their existing risk management framework, ensuring compliance is both practical and integrated.
Want to know more about how your peers are approaching the upcoming changes to the UK Corporate Governance code? Catch up on our recent RLN Talk, where we share some of the insights and knowledge of the network on how they’re preparing.
Share this
Related posts you may be interested in

Collaboration in action: UK Corporate Governance Code Reform

How are CROs preparing for changes to the UK Corporate Governance Code?
