headline verdana bold managing tax - deloitte€¦ · headline verdana bold managing tax balancing...

23
Headline Verdana Bold Managing tax Balancing current challenge with future promise The EYE, Amsterdam, 30 November - 1 December 2016

Upload: others

Post on 08-Apr-2020

19 views

Category:

Documents


0 download

TRANSCRIPT

Headline Verdana BoldManaging taxBalancing current challenge with future promiseThe EYE, Amsterdam, 30 November - 1 December 2016

Tax risk control frameworks -Managing tax risk with clarity and confidence

Marvin de Ridder, Deloitte Netherlands Emmet Bulman, Deloitte UK

3

Contents

Pressures on tax governance coming together 5

What is a Tax Risk Control Framework and how can it help 7

Components of a Tax Risk Control Framework: 10

Tax Risk Control Framework - Process

Tax Risk Control Framework - People

Tax Risk Control Framework - Systems

Characteristics of a sound Tax Risk Control Framework

Where the value is created 21

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

4

Pressures on tax governance – coming together

Tax is now a strategic concern

• Unilateral and multi-lateral legislative change – BEPS/Global Tax Reset.

• ETR and cash tax impact uncertain.• Broader stakeholder focus.

Regulators are more demanding

• Transparency and reporting requirements.

• Expectation of Board engagement, oversight.

• Focus on controls and systems.

Organisations are transforming

• Revisiting commercial strategies.• Transformation of finance and

broader supporting functions.• Changes in underlying financial

and other systems and application of new technologies

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

Pressures on tax risk management

Managing tax risk with clarity and confidence

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

6

Tax risk control framework sets out the activities tools, techniques and organisation arrangements to ensure all tax risks are identified, assessed, understood and that appropriate responses are in place to mitigate the impact of all risks.

Effective governance and risk management delivered via a robust tax risk control framework

Managing tax risk with clarity and confidence

Exte

rn

al

In

tern

al

Investors, lenders, customers, employees, tax authorities, wider society1

Board, CFO, Audit Committee, Risk

Heads of Divisional Finance, Group Tax, HR, SSC

Group Tax, HR,SSC teams

Internal Audit

Tax reporting – effective and consistent reporting of taxes, including UK tax strategy, financial reporting and other public disclosure

Tax strategy and governance – tax strategy, tax policy, tax committee, protocols for key decision-making, monitoring existing risk profile and appetite for new risk

Tax risk management – control framework for existingtax risks; process for identifying and reporting new risks

Tax management – people, processes and systemsto support effective business advice and compliance

Tax assurance – objective assessment of the effectiveness of design and operation of tax controls

*Separate conference session will be focused on external reporting aspect of the pyramid and how it links to strategy and governance

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

7

Circumstances will determine form of tax risk control framework

Managing tax risk with clarity and confidence

Industry the

organisation operates in

Size of the

organisation

Focus of tax authorities on

tax governance and risk management

Level of senior management

focus on tax

governance and risk management

Level of maturity of

the tax function

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

8

Enhancing tax risk management and governance

Coordinated rather than piecemeal approach is required

1. Collect, assess and address once

2. Central strategic oversight and review

3. Maximise automation – minimise disruption

4. Use and deploy often

Objective

UK tax strategy

Sarbanes Oxley

Corp criminal offence

FRC reviewof financialdisclosures

Tax reporting – effective and consistent reporting of

taxes, including UK tax strategy, financial reporting and

other public disclosure

Tax policy and governance – tax policy, tax

committee, protocols for key decision-making,

monitoring existing risk profile and appetite for new risk

Tax risk management – control framework for existing

tax risks; process for identifying and reporting new risks

Tax management – people, processes and systems to

support effective business advice and compliance

Tax assurance – objective assessment of the

effectiveness of design and operation of tax controls

Board

Executive

Management

Regulators

Tax

Authorities

Internal Audit

Business and

Functions

Coordinated governance and risk management maximising automation

Horizontal monitoring

Senior Accounting

Officer

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

Managing tax risk

Tax control framework: process, people and systems

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

10

Tax risk control framework – process

Managing tax risk with clarity and confidence

Tax risk governance – how do we oversee tax risk?

Defining tax risk – what are we trying to manage?

Tax risk appetite – what risks are we willing to take?

Tax risk management segregation of duties – who is responsible for what?

Tax risk management processes – how do we go about managing risk?

11

Board oversight with management execution

Tax risk governance – how do we oversee tax risk?

Board/ Audit Committee

Group Tax Risk Committee(Heads of Tax, Finance, Legal, HR, Risk and SSC)

Group Tax Risk Forum(Head of Tax, Regional and Functional Tax Heads)

Business and Function Governance and Control Committees

• Embeds risk culture and awareness• Defines tax strategy and policy• Sets on monitors tax risk appetite• Reviews areas of significant uncertainty and judgement

• Defines roles and responsibilities for management of tax risk• Defines common risk framework (policies, standards, controls)• Monitors tax risk profile, risk appetite and control environment• Ensures objective assurance, monitoring and reporting on tax risk• Review material or strategically significant matters escalating to board

as necessary

• Review of tax risk profile (inc risks and provisions)• Review of tax control issues – internal audits, risk events, change• Assess emerging risk and control issues• Review new, or material changes to, tax policies and standards• Review materials submitted to Group Tax Risk Committee and Board

• Tax risk identification and assessment• Tax risk control activities• Tax risk monitoring and reporting• Documentation of end-to-end processes• Objective assurance and testing

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

12

Defining tax risk – what are we trying to manage?What is tax risk and the key drivers?

Tax risk is the risk of:

• Financial loss in the form of increased tax costs, interest and penalties;

• Suboptimal commercial outcomes due to missed opportunities to structure arrangements in an efficient manner; and

• Restricted ability to achieve goals due to damaged reputation and relationships with stakeholders (e.g., tax authorities).

There are two key drivers of tax risk:

1. Judgemental – relates to understanding and interpretation of tax law and manifests itself as tax planning and advisory risk; and

2. Operational – relates to the processes, people and systems in place to manage tax risk and manifests itself as tax compliance risk.

The role of the tax function is to:

• Help senior management to understand and set its tax risk appetite, taking into account both the judgemental and operational aspects of tax risk; and

• Managing the tax risk profile to remain within this appetite either directly in relation to tax activities that the tax department is responsible for or indirectly through working with others (e.g., outsource providers, the business, other group functions).

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

13

Applying risk appetite

Tax risk appetite – what risks are we willing to take?

Capacity

Appetite

Profile

• Part of broader organisation-wide capacity and appetite for risk (e.g. capital requirements)

• Tax specific requirements increasing e.g. avoidance legislation, codes of practice and conduct etc

• Need to reflect balancing of competing pressures: value, compliance, reputation

• Key considerations:

– Goes beyond corporate tax e.g. application to VAT and operational taxes

– Cover own positions, those with counterparties and those with employees

– May vary by business, region, country

• Need to understand limits and triggers for escalation in relation to new decisions

• Also need to monitor limits and triggers themselves

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

14

Applying the three lines of defence model supports effective governance and risk management

Three line of defence applied to management of tax risk

Com

merc

ial and r

egula

tory

envir

onm

ent

Exte

rnal re

gula

tors

Exte

rnal Audit

Culture

organisational competence, motivation, organisation and relationships

Governance

Board sets risk appetite, tone at the top and provides oversight

First line of defence

• Owner of risk

• Operate controls

• Maintain documentation

• Identify, manage, mitigate and report on risk

• Identify and implement continuous improvements

Second line of defence

• Help set risk capacity and appetite

• Analyse, monitor and advise on legislation, practice

• Provide guidance on policies, procedures, system etc.

• Guide and undertake risk based monitoring, testing

Third line of defence

• Validate risk framework

• Provide assurance that framework is operating as expected

• Independent testing of key controls

• Provide recommendations for improvements

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

15

Tax risk management process – how we manage tax risk

Documentation of end to end processes

Objective assurance

Risk identification

and assessment

Monitoring and

reporting

Control activities

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

16

Tax risk control framework – people

Managing tax risk with clarity and confidence

Culture is the foundation for all components of the tax risk control framework and is the platform on which it is built

The board and executive management should take the lead in establishing a strong risk management culture

Appropriate levels of training and communication is required to ensure staff understand what is expected of them

Staff need to be able to speak the control and risk management orientated language of regulators, tax authorities, internal and external auditors and risk professionals

Oversight, accountability and performance appraisal should reinforce values and contribute to a strong tax risk culture

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

17

Tax risk control framework – systems

Managing tax risk with clarity and confidence

Management need to periodically consider the suitability of the IT infrastructure and its configuration for tax

Management need to assess the potential IT related risks to tax processes and determine the dependency between the use of technology in tax processes and technology generated controls

Tax control activities need to be aligned with established entity level controls

Management should be aware of tax specific software that can reduce risk and free up resource for other aspects of compliance

Work flow and reported related systems can be used to automate and make more efficient tax risk management monitoring and reporting processes

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

Managing tax risk

What does good look like and where value is created

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

19

Managing tax risk with clarity and confidenceCharacteristics of a sound control environment – how do you rate?

1. Tone from the top andculture

2. Individual accountability

3. Key customer processesare clearly identified and

understood

4. Material risks are identifiedand assessed

5. Risk appetite

6. Key controls areestablished and operated

7. Issues or events areidentified and escalated

8. Remedition programmes

9. Lessons learnt

10. Assurance

Best practice position

Current state assessment

tax processes

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

20

Where the value created

Managing tax risk with clarity and confidence

Clear articulation of tax risk strategy across the

organisation and translation of that strategy into daily

activities ensuring opportunities leveraged as well

as risks managed

Efficient, practical tracking of individual and aggregated tax risk associated with business activities and tax decisions.

Provides better understanding and more insight into tax

options

Identify gaps between the current state and desired state of processes for consolidating and communicating tax risks, and tracking, validating and improving tax management processes

Provides a scalable, risk based framework to accelerate progress toward the long

term vision of effective, sustainable management of tax operations

Firmly positions the management of tax risk within the context of the wider organisations governance and risk management program

Improved image, increased tax authority confidence, less enquires and audits, lower

costs and resource requirements

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

21

Next Steps

Managing tax risk with clarity and confidence

Define your framework

1. Ensure a coordinated rather than a piecemeal approach

2. Build the components of the framework

3. Ensure consistency with broader tax reporting /transparency requirments

4. Assess how you compare to sound risk management principles

5. Realise the value created

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

22

Faculty

Marvin de Ridder, Deloitte Netherlands

Director

Emmet Bulman, Deloitte UK

Senior Manager

[email protected]

+31 (0) 882882101

[email protected]

+44 20 7303 2322

©2016. For information, contact Deloitte Touche Tohmatsu Limited.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”) does not provide services to clients. Please see www.deloitte.com/about to learn more about our global network of member firms.

Deloitte provides audit, consulting, financial advisory, risk advisory, tax and related services to public and private clients spanning multiple industries. Deloitte serves four out of five Fortune Global 500® companies through a globally connected network of member firms in more than 150 countries and territories bringing world-class capabilities, insights, and high-quality service to address clients’ most complex business challenges. To learn more about how Deloitte’s approximately 245,000 professionals make an impact that matters, please connect with us on Facebook, LinkedIn, or Twitter.

This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively, the “Deloitte Network”) is, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on this communication.

© 2016. For information, contact Deloitte Touche Tohmatsu Limited.