AUE2602: Corporate Governance in Accountancy – Comprehensive Exam Notes (UNISA BCom Internal Auditing)

The module AUE2602: Corporate Governance in Accountancy is a core component of the UNISA BCom in Internal Auditing and BCompt streams, and it feeds directly into higher-level modules like AUE3701, AUE3761, AUE4861, and related governance content in modules such as AUD2601, AUE2601, and AUE3702. These notes focus on what South African students typically search for online – “AUE2602 exam notes”, “AUE2602 study guide pdf”, “UNISA corporate governance questions and answers” – and are aligned to South African corporate governance practices, especially King IV™, the Companies Act 71 of 2008, and related regulatory frameworks.

The material is written with UNISA distance-learning students in mind, but it is also relevant to students at other South African universities and universities of technology (for example governance overlaps with CUT’s IAUD20AS Internal Auditing, UJ’s ACCT2CG Corporate Governance, and NWU’s ACGT211). The emphasis is on exam-oriented understanding, typical question areas, and application to the South African context of corporate governance in accountancy and internal auditing.

1. Foundations of Corporate Governance in Accountancy (with a South African Focus)

1.1 Meaning and Purpose of Corporate Governance

Corporate governance refers to the systems, processes, structures, and relationships by which organisations are directed and controlled. In the context of AUE2602 and related UNISA modules like AUE2601 and AUD2601, governance is not a vague idea; it is a framework that:

Allocates rights and responsibilities among the board, management, shareholders, and other stakeholders.
Provides the rules and procedures for decision-making.
Seeks to ensure accountability, fairness, transparency, and ethical conduct in organisational affairs.

In South Africa, corporate governance is strongly influenced by the King Commission Reports (King I, II, III, and King IV™), with King IV being principle-based and applying to all organisations, not only listed companies.

Purpose of corporate governance in accountancy:

Protecting provider-of-capital interests
Investors, lenders, and other providers of capital rely on credible financial reporting, which in turn requires that the company is properly governed:
- Adequate internal controls over financial reporting.
- Independent oversight by the audit committee.
- Reliable, ethical behaviour by management and accountants.
Enhancing accountability and stewardship
Management acts as stewards of the organisation’s resources. Corporate governance mechanisms ensure that:
- Management reports to the board and to stakeholders.
- There are consequences for poor performance or misconduct.
- Decisions are made with due care, skill and diligence (a central King IV and Companies Act theme).
Supporting long-term value creation
In King IV, the key governance outcome is value creation in a sustainable manner over the short, medium and long term. Governance in accountancy ensures:
- Financial information supports good strategic decisions.
- Risk information (including financial risks) is integrated with strategy.
- Performance is measured in a balanced way (not just profit, but also social and environmental impacts).
Compliance with law and regulation
Accountants and internal auditors must help the organisation comply with:
- Companies Act 71 of 2008
- Public Finance Management Act (PFMA) and Municipal Finance Management Act (MFMA) for public sector entities
- JSE Listings Requirements for listed entities
- Tax, labour, environmental and sector-specific legislation.

1.2 Key Corporate Governance Principles (King IV™ Orientation)

Although the AUE2602 study guide may summarise King IV principles in exam-friendly formats, the essence can be grouped into four governance outcomes and underlying principles.

King IV Governance Outcomes:

Ethical culture
Good performance
Effective control
Legitimacy

These outcomes are supported by principles that typically appear in exam questions asking students to “discuss”, “explain” or “apply to a scenario”, such as:

Ethical and effective leadership by the governing body (board).
Governance of ethics – establishing and monitoring organisational ethics policies.
Responsible corporate citizenship – compliance and contribution to societal goals.
Strategy, performance and reporting – integrated and transparent reporting.
Governing risk and technology and information (IT governance).
Governing compliance, remuneration, and assurance.

These principles are not applied mechanically; King IV adopts the “apply and explain” approach, which means entities are expected to:

Apply each principle as appropriate to their context, and
Explain how it is applied in practice within their own organisational setting.

For example, a JSE-listed company must explain in its integrated report how its board ensures an ethical culture (e.g. through codes of conduct, training, whistle-blowing mechanisms, and disciplinary processes).

1.3 The Agency Problem and Stakeholder Theory

For AUE2602, understanding theoretical foundations of corporate governance is important because exam questions often ask you to link theory to practice in the South African environment.

1.3.1 Agency Theory

Agency theory focuses on the principal–agent relationship:

Principals: Shareholders (owners).
Agents: Directors and managers (those entrusted with decision-making and control).

Because managers may pursue their own interests (e.g. bonuses, job security) rather than shareholder interests, there is an agency problem. Corporate governance mechanisms aim to reduce agency costs by:

Monitoring management through the board, audit committee, internal audit, external audit.
Aligning incentives using performance-based remuneration schemes, share options, clawback arrangements.
Information disclosure and transparency (e.g. integrated reporting and financial statements).

In South Africa, the Companies Act and King IV require:

Separation between board and management, with independent non-executive directors.
Establishment of independent committees (audit committee, social and ethics committee, remuneration committee).
Clear reporting lines and responsibilities.

1.3.2 Stakeholder Theory

While agency theory emphasises shareholder primacy, stakeholder theory recognises that corporations affect and are affected by multiple groups:

Shareholders and lenders
Employees and trade unions
Customers and suppliers
Communities and the environment
Regulators and government departments

In King IV, corporate governance embraces a stakeholder-inclusive approach, requiring boards to consider legitimate and reasonable interests of stakeholders in decision-making. This is especially relevant in a South African context because of:

The Constitution and Bill of Rights, which embed socio-economic rights.
High levels of inequality and unemployment, necessitating consideration of broader societal impacts.
Transformational imperatives like B-BBEE and employment equity.

Exam tip: When answering essay questions on corporate governance in AUE2602, always integrate the stakeholder-inclusive nature of King IV, rather than only shareholders.

1.4 The Role of Professional Accountants and Internal Auditors

In modules like AUE2602, AUE2601 and later in AUE3701 and AUE4861, you are expected to see corporate governance as central to the work of professional accountants and internal auditors.

Accountants’ role:

Preparing and presenting financial statements that comply with IFRS and are free from material misstatement.
Designing and implementing financial controls (e.g. segregation of duties, reconciliations).
Ensuring compliance with tax laws, Companies Act, and other regulations.
Supporting the audit committee by providing accurate financial information and explanations.

Internal auditors’ role (aligned with IIA standards and modules like AUD2601 and IAUD20AS at CUT):

Providing independent, objective assurance and consulting regarding the effectiveness of governance, risk management, and internal control.
Evaluating the governance processes:
- Tone at the top
- Ethical culture
- Communication of values and expectations
- Whistle-blowing mechanisms
Reporting governance deficiencies to the audit committee and senior management.

Link to corporate governance:

Strong governance requires sound internal control, effective risk management, and assurance functions.
Internal audit and external audit are assurance providers that help the board fulfil its oversight responsibilities.

1.5 Good vs Poor Corporate Governance: Why It Matters

For exam purposes, it is useful to contrast consequences of good and poor corporate governance, especially with South African examples that examiners love to use in scenario questions.

Benefits of good corporate governance:

Improved access to capital: investors are more willing to invest in well-governed companies.
Lower cost of capital: lenders may offer better rates to entities with strong governance.
Enhanced organisational reputation and brand value.
Reduced risk of fraud, corruption, and financial misstatements.
Better strategic decisions and long-term sustainability.

Risks of poor corporate governance:

Corporate scandals (fraud, corruption, financial misstatements).
Loss of investor confidence, share price collapse, or withdrawal of funding.
Regulatory sanctions, penalties, and litigation.
Damage to reputation, possible collapse or business rescue.

Examples often used in South African governance discussions include:

Steinhoff: Massive accounting irregularities revealed weak governance, poor board oversight, and inadequate internal controls.
Eskom and other SOEs: Governance failures relating to state capture, weak boards, and inadequate oversight.

When preparing for AUE2602 exams, be ready to apply governance principles to such real-world cases—analysing what went wrong, which King IV principles were breached, and how governance structures could have prevented or mitigated the damage.

2. South African Legal and Regulatory Framework for Corporate Governance

2.1 Companies Act 71 of 2008

The Companies Act 71 of 2008 is the primary piece of legislation governing companies in South Africa and is central across modules like AUE2602, AUE2601, CLA2601 Company Law, and governance-related modules such as ACCT2CG Corporate Governance at UJ.

Key governance-related aspects:

2.1.1 Types of Companies and Applicability

Profit companies:
- Public companies (Ltd) – may list on the JSE.
- Private companies (Pty) Ltd.
- State-owned companies (SOC).
- Personal liability companies (Inc).
Non-profit companies (NPC).

The Companies Act applies differently depending on company type. For example, public and state-owned companies have more stringent governance requirements (e.g. mandatory audit committees, company secretaries).

2.1.2 Duties and Responsibilities of Directors

Section 76 of the Act sets out standards of directors’ conduct:

Directors must act:
- In good faith and for a proper purpose.
- In the best interests of the company.
- With the degree of care, skill, and diligence that may reasonably be expected of someone carrying out those functions.

Section 77 deals with liability of directors, including liability for:

Breach of fiduciary duties.
Negligence, reckless trading.
Unauthorised distributions.
False or misleading financial statements.

Exam questions often ask students to evaluate director behaviour in scenarios using these legal standards.

2.1.3 Board Committees and Prescribed Officers

The Act mandates specific committees for certain categories of companies:

Audit Committee (section 94) – mandatory for:
- All public companies.
- All state-owned companies.
- Some other companies if required by MOI or regulations (e.g. widely held private companies).

Audit committee members must be:

Independent non-executive directors only.
Financially literate, with at least one member having expertise in accounting/auditing.

The Act also recognises “prescribed officers” (Regulation 38):

Senior managers who exercise significant influence on management of whole or significant part of the business.
They carry similar duties and potential liabilities as directors.

This is especially relevant for accountants and senior finance managers who may meet the definition of “prescribed officer”.

2.1.4 Shareholder Rights and Meetings

Corporate governance is strengthened by protecting shareholder rights, including:

Right to receive notice of meetings and full information.
Right to vote on key issues (e.g. election of directors, auditor appointment, major transactions).
Right to approve remuneration policies in certain cases.
Remedies such as appraisal rights and relief from oppressive conduct.

Examiners often use multiple-choice and written questions on types of resolutions, notice requirements, and voting thresholds.

2.2 Public Finance Management Act (PFMA) and Municipal Finance Management Act (MFMA)

For students focusing on internal auditing in public sector entities (a common area for UNISA BCom Internal Auditing and CUT’s IAUD20AS graduates), understanding PFMA and MFMA is essential.

2.2.1 PFMA

The Public Finance Management Act (PFMA), Act 1 of 1999, sets out governance and financial management requirements for:

National and provincial departments.
Public entities listed in Schedules 2 and 3 (e.g. Eskom, Transnet, SABC).

Key governance elements:

Accounting officers and authorities (e.g. Director-General, CEO) with clear responsibilities for financial management.
Requirements for internal audit functions and audit committees.
Emphasis on effective, efficient, and transparent systems of financial and risk management.
Annual reports and financial statements, including performance information.

2.2.2 MFMA

The Municipal Finance Management Act (MFMA), Act 56 of 2003, applies to:

Municipalities and municipal entities.

It has similar governance requirements to the PFMA, including:

Proper financial management systems.
Integrated development planning and budgeting.
Establishment of internal audit and audit committees.
Emphasis on oversight by municipal councils.

Students in AUE2602 may not always have in-depth PFMA/MFMA questions, but they are often tested at least at a conceptual level, especially if the case study features a public sector entity.

2.3 King IV™ Report on Corporate Governance for South Africa

The King IV Report is not legislation but a voluntary governance code, yet it has major influence because:

The JSE Listings Requirements require listed companies to apply King IV and explain how they do so.
Many public and private entities adopt its principles as best practice.
UNISA modules such as AUE2602, AUE4861, and AUE3701 embed King IV throughout the syllabus.

2.3.1 Structure of King IV

King IV is structured around:

16 principles applicable to all organisations.
One additional principle for institutional investors.
Sector supplements (e.g. SOEs, non-profits, municipalities).

Principles cover:

Ethical and effective leadership.
Governance of ethics.
Responsible corporate citizenship.
Strategy, performance and reporting.
Governance structures and roles of the governing body.
Delegation to committees and management.
Governance of risk.
Governance of technology and information.
Compliance governance.
Remuneration governance.
Assurance (combined assurance model).
Stakeholder relationships.

2.3.2 The “Apply and Explain” Approach

Instead of “apply or explain” (King III), King IV requires companies to:

Apply the principles – they are assumed to be applied, and
Explain the practices used to achieve the principles.

In an AUE2602 exam scenario, you may be asked to:

Draft an outline of how a fictional company should explain its application of one or more King IV principles in its integrated report.
Critically assess whether a company’s governance disclosure meets the apply and explain expectations.

2.4 JSE Listings Requirements and Other Relevant Regulation

The JSE Listings Requirements complement King IV by imposing mandatory obligations on listed entities, such as:

Appointment of a company secretary.
Establishment of audit committees, remuneration committees, and sometimes risk committees.
Specific financial reporting requirements, including interim and annual reporting.
Disclosure of director dealing, related party transactions, and corporate actions.

Other sectoral regulators and statutes:

Banks Act – for banks, enforced by the Prudential Authority.
Insurance Act – for insurers, with governance frameworks like the Solvency Assessment and Management (SAM) regime.
Financial Sector Regulation Act – establishes twin peaks: Prudential Authority and Financial Sector Conduct Authority (FSCA).

These regulations often require boards, risk committees, and audit committees with strong governance measures.

2.5 Professional and Ethical Standards

Corporate governance in accountancy also intersects with professional and ethical standards, notably:

SAICA Code of Professional Conduct (aligned with the IESBA Code).
IIA Code of Ethics and Standards for internal auditors.
Codes used by other bodies like CIMA, SAIPA, and IRBA.

Key ethical principles:

Integrity
Objectivity
Professional competence and due care
Confidentiality
Professional behaviour

Exam questions in AUE2602 frequently expect students to:

Identify ethical threats to independence (self-interest, self-review, advocacy, familiarity, intimidation).
Propose safeguards to eliminate or reduce those threats.
Evaluate management and board conduct against ethical standards.

3. Governance Structures: Boards, Committees, and Management

3.1 The Governing Body / Board of Directors

In the South African context, the board of directors (or equivalent governing body for non-profit and public entities) is the focal point and custodian of corporate governance (King IV Principle 6).

3.1.1 Composition of the Board

Key considerations for composition, emphasised in AUE2602, AUE2601 and ACCT2CG-type modules:

Balance of power:
- Executive directors (CEO, CFO, COO) vs non-executive directors (NEDs).
- Majority of NEDs should be independent, especially in JSE-listed companies.
Chairperson:
- Preferably an independent non-executive director.
- Should not be the CEO – separation of roles reduces concentration of power.
Skills, experience and diversity:
- Financial, legal, industry, governance, risk, and HR expertise.
- Gender, race, and age diversity (King IV and B-BBEE imperatives).
- Knowledge of local and international markets.

3.1.2 Roles and Responsibilities of the Board

The board’s primary responsibilities include:

Setting strategic direction
- Approves the organisation’s strategy and business plan.
- Ensures that strategy considers risks, opportunities, resources, and stakeholders.
Approving policies and frameworks
- Risk management policy.
- Ethics and anti-corruption policies.
- Delegation of authority framework.
Oversight and monitoring
- Monitors implementation of strategy by management.
- Tracks performance against agreed key performance indicators (KPIs).
- Evaluates CEO and executive performance regularly.
Ensuring integrity of reporting
- Approves annual financial statements and integrated reports.
- Ensures fair, balanced and understandable reporting.
- Oversees internal and external assurance (via audit committee and other assurance providers).
Risk and IT governance
- Sets risk appetite and tolerance levels.
- Oversees risk management processes.
- Ensures effective IT governance and cybersecurity measures.
Stakeholder relationships
- Ensures that stakeholder engagement processes are in place.
- Balances conflicting stakeholder needs.
Remuneration and succession planning
- Approves remuneration policy and packages for executives.
- Plans for board and executive succession.

3.2 Board Committees

King IV recognises that, due to complexity, the board often delegates certain responsibilities to board committees, while retaining overall accountability.

3.2.1 Audit Committee

The audit committee is central in AUE2602 and related modules like AUE2601 and AUE3701.

Composition:

At least three independent non-executive directors for public and state-owned companies.
One member must have competencies in accounting, auditing, and financial management.

Key responsibilities:

Financial reporting oversight
- Reviews annual financial statements and interim reports.
- Assesses significant accounting judgements and estimates.
- Monitors compliance with IFRS and the Companies Act.
External audit oversight
- Recommends appointment/re-appointment of external auditors.
- Approves audit fees and scope.
- Assesses auditor independence (e.g. non-audit services).
Internal audit oversight
- Approves internal audit charter and annual plan.
- Evaluates internal audit independence and effectiveness.
- Reviews internal audit reports on internal control and risk.
Internal control and risk management
- Evaluates the adequacy of internal controls related to financial reporting.
- Coordinates with the risk committee (if separate) on risk matters.

Examiners often ask for:

Roles and responsibilities of an audit committee,
Impact of audit committee weaknesses on corporate governance,
Lists of factors indicating an effective audit committee.

3.2.2 Risk Committee

Depending on size and complexity, the board may have a separate risk committee or assign risk oversight to the audit committee.

Typical responsibilities:

Approving risk management policy and frameworks.
Monitoring top risks (strategic, operational, financial, compliance).
Overseeing risk responses and internal controls.
Linking risk management with strategy and performance.

For banks, insurers, and some state-owned entities, having a dedicated risk committee is often a regulatory requirement.

3.2.3 Remuneration Committee

Remuneration is highly sensitive and linked to corporate governance scandals worldwide.

Functions:

Designs and recommends remuneration policies aligned with performance and long-term value creation.
Ensures remuneration is fair and responsible considering internal pay gaps and stakeholder expectations.
Reviews and recommends packages for the CEO, CFO and executive team.
Oversees disclosure of remuneration information in the annual report.

In South Africa, there is often a non-binding advisory vote by shareholders on the remuneration policy and implementation report at the AGM. Poor votes may signal governance concerns.

3.2.4 Social and Ethics Committee

Required under the Companies Act for:

All public companies,
State-owned companies, and
Certain other companies meeting public interest score thresholds.

Responsibilities:

Monitors the organisation’s activities relating to:
- Social and economic development (e.g. B-BBEE, skills development).
- Good corporate citizenship (environment, community, consumer relationships).
- Labour and employment (e.g. employment equity, working conditions).
- Ethical conduct and corruption prevention.

This committee is a key link between corporate governance, sustainability, and ethics.

3.3 Management’s Role and the “Three Lines” Model

While the board holds ultimate responsibility for governance, management is responsible for:

Implementing strategy.
Managing operations and risks.
Maintaining internal controls.

The modern “Three Lines Model” (formerly the three lines of defence) is widely used in governance and internal auditing, including in UNISA’s AUD2601 and AUE4861.

First line – Management and operational staff
- Own and manage risks.
- Implement controls in their processes.
- Report upwards on performance and risk exposure.
Second line – Risk management and compliance functions
- Provide guidance, policies, tools, and monitoring regarding risk and compliance.
- Support management but also challenge and oversee as needed.
Third line – Internal audit
- Provides independent and objective assurance to the board and management on governance, risk, and controls.
- Evaluates the adequacy and effectiveness of first and second lines.

In corporate governance questions, examiners may require you to:

Distinguish clearly between the roles of first, second, and third lines.
Discuss how internal audit maintains independence and objectivity within the three lines model.

3.4 The Company Secretary

In JSE-listed and certain large companies, the company secretary plays an important governance role:

Guides the board on its duties and responsibilities.
Ensures compliance with Companies Act, MOI, and stock exchange rules.
Coordinates board and committee meetings, agendas, minutes and documentation.
Facilitates induction and ongoing training for directors.

Although not an executive role, the company secretary must keep some level of independence from management to advise the board honestly.

4. Governance Processes: Risk, Internal Control, Ethics, and Assurance

4.1 Risk Governance

Risk governance is about the culture, structures and processes for managing risk at a strategic level.

4.1.1 Risk Appetite and Tolerance

King IV requires the board to determine:

Risk appetite: The types and amount of risk the organisation is willing to pursue or retain in pursuit of its objectives.
Risk tolerance: The acceptable variation in performance related to key objectives.

Risk appetite statements can be:

Qualitative (e.g. “zero tolerance for fraud and corruption”; “conservative approach to leverage”).
Quantitative (e.g. “maximum net debt-to-EBITDA of 2.5”; “target credit rating of at least BBB-”).

Exam questions may ask you to:

Draft a simple risk appetite statement for a scenario company.
Explain the importance of aligning risk appetite with strategy, capital, and stakeholder expectations.

4.1.2 Risk Management Process

Typical stages of risk management, aligned with ISO 31000 and used across internal auditing modules:

Establish context
- Understand the organisation’s environment, stakeholders, objectives.
Risk identification
- Identify events or conditions that may affect objectives.
- Use tools like brainstorming, checklists, SWOT, PESTEL, interviews.
Risk analysis and evaluation
- Assess likelihood and impact (inherent and residual risk).
- Prioritise risks for response based on risk appetite.
Risk treatment (response)
- Avoid (exit the activity).
- Reduce/mitigate (implement controls).
- Transfer/share (insurance, outsourcing).
- Accept (if within appetite and cost of treatment is high).
Monitoring and reviewing
- Track risk indicators and control performance.
- Update risk registers and risk profiles.
Communication and consultation
- Engage stakeholders on risks and responses.

Internal auditors provide assurance on the effectiveness of these processes and may also perform consulting engagements to improve risk management.

4.2 Internal Control Systems

Corporate governance relies heavily on strong internal control systems, particularly in the financial reporting context.

4.2.1 Components of Internal Control (COSO Framework)

AUE2602 often draws from the COSO Internal Control – Integrated Framework with five interrelated components:

Control environment
- Ethics and values.
- Commitment to competence.
- Board and audit committee oversight.
- Organisational structure.
- HR policies and practices.
Risk assessment
- Identification and analysis of risks to achieving objectives.
- Consideration of fraud risk.
Control activities
- Policies and procedures that help ensure management directives are carried out.
- Examples: authorisation, approvals, reconciliations, segregation of duties, physical controls.
Information and communication
- Relevant, timely, accurate information flows (upwards, downwards, across).
- Communication of roles and responsibilities.
Monitoring activities
- Ongoing and periodic evaluations of internal control performance.
- Internal audit is a key monitoring function.

Exam questions may:

Ask for examples of control activities for a specific process (e.g. sales and receivables cycle).
Test understanding of the link between control environment and ethical culture.

4.2.2 Limitations of Internal Control

Despite robust controls, internal control cannot provide absolute assurance due to:

Human error and misunderstandings.
Collusion by two or more employees.
Management override of controls.
Cost-benefit limitations (too costly to control every risk completely).

This is crucial for AUE2602 and later audit modules like AUE3701 and AUE3761, because it explains why governance also requires ethical leadership and independent assurance, not just a checklist of controls.

4.3 Ethics Management and Whistle-Blowing

4.3.1 Code of Ethics / Code of Conduct

A comprehensive code of ethics is a key corporate governance tool:

Defines values, principles, and expected behaviours.
Addresses conflict of interest, gifts and hospitality, fraud, bribery, harassment, discrimination, and confidentiality.
Applies to directors, employees, and often to suppliers and business partners.

For exam purposes, you should be able to:

Draft or critique sections of a code of ethics.
Explain how a code contributes to an ethical culture and ties into King IV’s emphasis on organisational ethics.

4.3.2 Whistle-Blowing and Protected Disclosures

The Protected Disclosures Act encourages employees to report wrongdoing by offering protection against occupational detriment.

Effective whistle-blowing mechanisms:

Provide confidential reporting channels (hotlines, email, external reporting).
Allow for anonymous reporting (where possible).
Guarantee no retaliation for good-faith reporting.
Ensure thorough investigation of allegations and remedial action.

Examiners may ask how internal auditors or boards should respond to whistle-blowing reports.

4.4 Combined Assurance

King IV introduces the concept of combined assurance:

Coordinated assurance obtained from various assurance providers regarding the organisation’s risk and control environment.

Assurance providers typically include:

Management (first line assurance – self-assessments, management reviews).
Risk and compliance functions (second line).
Internal audit (third line).
External auditors.
Other external assurance providers (e.g. environmental auditors, B-BBEE verification agencies, health and safety inspectors).

A combined assurance model aims to:

Avoid duplication of assurance efforts.
Identify assurance gaps (areas not covered by any provider).
Provide the board and audit committee with a coherent, comprehensive view of assurance over key risks.

For exam purposes, you may be required to:

Explain the concept,
Identify assurance providers in a scenario, and
Suggest how combined assurance could be improved.

4.5 IT Governance and Cybersecurity

In the digital era, King IV and South African regulators emphasise IT governance as a key aspect of corporate governance.

Key aspects:

The board should ensure that IT is aligned with the business and contributes to value creation.
IT risk (including cyber risk) should be integrated with enterprise risk management.
Information security, data privacy, and resilience (business continuity, disaster recovery) are crucial.

Example exam angles:

Describe the board’s responsibilities for IT governance.
Discuss governance measures that a company should implement to reduce cybersecurity risks (e.g. policies, awareness training, firewalls, incident response plans).

5. Application, Exam Technique, and Links to Other South African Courses

5.1 Typical AUE2602 Exam and Assignment Themes

UNISA’s AUE2602 assessments (including online examinations and year marks) typically test:

Knowledge and understanding
- Definitions, principles, and frameworks (e.g. King IV, Companies Act, COSO).
- Roles and responsibilities of governance structures (board, committees, internal audit).
Application and analysis
- Applying principles to case studies.
- Identifying governance weaknesses and recommending improvements.
- Evaluating director conduct in terms of Companies Act and King IV.
Ethics and professional judgement
- Dealing with ethical dilemmas, conflicts of interest, pressure to misstate financials.
- Recommending safeguards to protect integrity and independence.

Past and typical question formats include:

Scenario-based short essays (e.g. 10 marks): “Identify and explain five governance weaknesses in the scenario above.”
Long-form essay questions (e.g. 20–30 marks): “Discuss the role of the audit committee and internal audit in strengthening corporate governance in the context of Company X.”
Structured questions (matching, multiple choice, fill-in-the-blanks) testing terminology and basic understanding.

5.2 How to Study Corporate Governance for UNISA Distance Learning

Students often search for “AUE2602 exam tips UNISA”, “UNISA past papers AUE2602”, or “AUE2602 summary notes”. Effective preparation requires more than memorising points.

5.2.1 Build Conceptual Understanding First

Start with the study guide and prescribed material.
Make your own summaries of each topic:
- Definition and purpose of corporate governance.
- Key laws and codes (Companies Act, King IV).
- Governance structures and roles.
- Risk, internal control, ethics, and assurance.

Use mind-maps or tables to link concepts, e.g.:

Concept	Key Reference	Main Exam Angle
Ethical leadership	King IV Principle 1	Characteristics of ethical leaders; examples
Audit committee	Companies Act s94; King	Composition; roles; importance
Internal control	COSO framework	Components; examples; limitations
Stakeholder approach	King IV stakeholder view	Inclusivity; stakeholder engagement; legitimacy

5.2.2 Practice Application Using Case Studies

Take any South African company (e.g. Sasol, MTN, Shoprite) and:
- Read its integrated report (available online).
- Identify board structure, committees, and key governance practices.
- Compare them with King IV expectations.
For exam practice:
- Create mini-scenarios based on these companies.
- Ask yourself: “What governance strengths and weaknesses can I identify? What recommendations would I make?”

This trains you for the scenario-based questions common in AUE2602 and in similar modules like NWU ACGT211 and CUT IAUD20AS.

5.2.3 Focus on Keyword Phrasing and “Exam Language”

Examiners look for specific phrases that indicate solid understanding. For example:

“The board is the focal point and custodian of corporate governance.”
“The organisation adopts a stakeholder-inclusive approach as per King IV.”
“The audit committee provides independent oversight of the effectiveness of internal controls, risk management, and the external and internal audit functions.”
“Internal control provides reasonable, not absolute, assurance due to inherent limitations.”

Having these phrases ready helps you structure answers quickly and earn marks efficiently.

5.3 Common Exam Pitfalls and How to Avoid Them

Confusing different governance roles
- Students often mix the roles of the board, audit committee, risk committee, internal audit, and external audit.
- To avoid this, create a one-page table summarising each role, typical tasks, and reporting lines.
Listing generic points without context
- If a question refers to a specific case (e.g. a manufacturing company with weak controls), generic lists without specific reference to the scenario may score fewer marks.
- Always link points to the given scenario (“…in this case, the lack of segregation between ordering and receiving increases the risk of fictitious purchases”).
Ignoring South African context
- AUE2602 emphasises South African law and King IV. Responses that entirely ignore this context appear incomplete.
- Mention relevant Acts, King IV principles, and local considerations like B-BBEE and PFMA where appropriate.
Weak structure and poor time management
- Many UNISA students attempt all questions but do not finish them properly.
- Use headings, subheadings, and bullet points in your answers where allowed in online exams.
- Allocate time based on mark allocation (e.g. 20 marks ≈ 20 minutes).

5.4 Linking AUE2602 Content to Other Courses and Career Paths

Corporate governance is a foundational theme across many South African university modules:

At UNISA:
- AUE2602 builds the base for more advanced governance and auditing topics in AUE3701, AUE3702, AUE4861.
- AUD2601 (Internal Auditing: Governance and Control) deepens the three lines model, COSO, and internal audit’s governance role.
- CLA2601 (Company Law) overlaps with directors’ duties and Companies Act.
At Central University of Technology (CUT):
- Modules like IAUD20AS Internal Auditing and IAUD30BS engage directly with governance, risk, and combined assurance issues.
- Students often search for “CUT internal auditing corporate governance notes”, and the content aligns closely with AUE2602 themes.
At other universities:
- UJ’s ACCT2CG Corporate Governance module centres around King IV and South African governance codes, similar to AUE2602.
- NWU’s ACGT211 and TUT’s ACG201B also cover governance, King IV, PFMA/MFMA, and the accountant’s role.

Career relevance:

Students who master AUE2602 are better prepared for roles such as:

Internal auditor (junior, then senior) in private or public sector.
Corporate governance officer or compliance officer.
Risk analyst or risk officer.
Financial accountant or management accountant involved in reporting, controls, and risk.
Future CA(SA) trainees in public practice or industry.

Employers increasingly expect graduates to understand not only technical accounting, but also governance and ethics, especially in light of South African corporate scandals and increased regulatory scrutiny.

5.5 Example Integrated Question and Answer Outline

To consolidate your understanding, consider a typical integrated exam-style question:

Scenario (simplified):
Makhoza Ltd is a rapidly growing private manufacturing company in Gauteng. The CEO is also the board chairperson. The board consists of four executive directors (including the CEO and CFO) and two non-executive directors, none of whom are independent. The company has no audit committee, no internal audit function, and no formal risk management processes. Recently, there have been allegations of inventory theft and financial statement manipulation.

Possible question parts:

Identify and explain five corporate governance weaknesses in Makhoza Ltd. (10 marks)
Recommend improvements, referring to King IV and the Companies Act. (10 marks)
Explain how the establishment of an audit committee and internal audit function could improve governance. (10 marks)

Answer outline:

Governance weaknesses
- CEO is also board chair: Violates principle of separation between leadership of board and management; risk of concentration of power.
- Board composition: Majority executives; only two NEDs who are not independent; weak oversight and challenge.
- Lack of audit committee: Contravenes best practice and, if Makhoza becomes public/widely held, legal requirements; no independent oversight of financial reporting and internal controls.
- No internal audit function: No independent assurance over controls and risk management; increases risk of undetected fraud and error.
- No formal risk management process: Reactive approach; no systematic identification, assessment, and treatment of key risks such as inventory theft and financial reporting fraud.
Recommendations
- Appoint an independent non-executive chairperson as per King IV.
- Increase the number of independent non-executive directors, ensuring diversity of skills and backgrounds.
- Establish an audit committee composed of at least three independent NEDs with financial literacy.
- Create a risk management framework, including risk appetite, risk register, and regular reporting to the board.
- Implement an internal audit function, possibly outsourced initially, to provide assurance on internal controls, including inventory and financial reporting.
Role of audit committee and internal audit
- Audit committee:
  - Oversees financial reporting; reviews significant judgements and estimates.
  - Monitors internal control and risk management effectiveness.
  - Liaises with internal and external auditors; ensures independence and adequate resourcing.
- Internal audit:
  - Conducts risk-based audits on inventory management, procurement, and financial reporting cycles.
  - Reports findings to audit committee; recommends control improvements.
  - Evaluates the effectiveness of risk management processes and ethical culture.

Structuring answers like this, with headings, clear points, and references to King IV and Companies Act, positions you to score high marks in AUE2602 and to carry a solid foundation into further governance and audit modules at UNISA and other South African institutions.

By mastering the concepts and applications outlined in these exam-focused AUE2602: Corporate Governance in Accountancy notes, UNISA BCom Internal Auditing students – and students taking similar modules such as CUT IAUD20AS, UJ ACCT2CG, NWU ACGT211 – can develop a deep, practical understanding of how governance, ethics, risk, and control interlock. This understanding not only ensures strong exam performance but also lays the groundwork for ethical, effective practice in South Africa’s evolving corporate and public-sector environments.