Sections

The Pensions Regulator

Codes of practice

Codes of practice

Code of practice 09
Internal controls

We're keen to find out how useful you find our internal controls code of practice and its associated guidance.

Let us know your views by completing our brief questionnaire - it'll only take 5-10 minutes of your time. Many thanks for your help.

Access the survey

Reporting

  1. There is no explicit statutory requirement to report a lack of adequate internal controls. However, persistent failure to put in place adequate internal controls may, for example, be a contributory cause of an administrative breach or, in more extreme cases, result in the reduction or loss of scheme assets.
  2. Where the effect and wider implications of not having in place adequate internal controls are likely to be materially significant, the regulator would expect to receive a whistleblowing report. We would therefore expect users of this code to have a working knowledge of code of practice No. 1 (Reporting breaches of the law) which gives specific guidelines on reporting.

The Pensions Regulator's powers

  1. The regulator's principal aim is to prevent problems from developing and, where possible, provide support and advice to trustees where potential problems are identified. The regulator also has at its disposal a number of powers or regulatory tools that may be used in circumstances where serious internal control failings occur.
  2. Regulatory action would have regard to the circumstances of the scheme and any use of powers would be proportionate.

Related documents
Code of practice 09: Internal controls (PDF)
Related pages
Supporting guidance to be read in conjunction with the code: Internal controls guidance