Read with the right scope
Companies within the UK Corporate Governance Code’s scope, including the commercial companies and closed-ended investment funds listing categories. Useful voluntary lessons do not extend the Code to all businesses.
Status: Implementation briefing · published 1 November 2026 · no new rule announced today
What the provision requires
The 2024 Code generally applies to financial years beginning from 1 January 2025; revised Provision 29 applies from 1 January 2026. It calls for an account of the board’s monitoring and review, a declaration on material controls at the balance-sheet date and disclosure of material controls that were ineffective with remedial action. It does not require every internal control to be declared effective.
The FRC explains that each board determines material controls in its circumstances. External assurance is not automatically required; the board decides what evidence it needs. The provision operates within the Code’s comply-or-explain framework.
Practical implications for the evidence file
Our editorial recommendation is to organise evidence around the conclusion the board will need to reach. Begin by recording the entities, reporting period, risk assessment and reasoning used to identify important controls. Keep information on design, operation and exceptions distinguishable.
A control dashboard should let the reader trace a judgement to a test, a period and an owner. A green status without a supporting record may obscure uncertainty. Conversely, discovering a weakness should start a reasoned assessment and remediation process, rather than an attempt to remove it from the report.
- Confirm the financial year and actual reporting scope.
- Agree the rationale for materiality and evidence coverage.
- Review unresolved failures and the status of previous actions.
- Distinguish remediation completed from successful retesting.
- Give the board time to challenge assumptions before approving its statement.
What this means for smaller organisations
An SME can use the same evidence discipline voluntarily without asserting that Provision 29 applies. A short report covering the most consequential risks, control gaps and accountable actions may be more useful than adopting a listed-company reporting structure wholesale. This briefing explains an existing reporting change; its publication date does not indicate a new legal announcement.
Part of the governance guidance hub. See how the GRC framework connects the disciplines.
Connect this to your review
Link the risk, control, obligation and next action in the review workspace. Record what is known, what needs checking and which decision follows. The workspace organises your records; it does not inspect or independently verify evidence.
Sources & verification
- FRC — Code scope, commencement and Provision 29 questions ↗Source checked 1 November 2026 · Primary source
- FRC — full UK Corporate Governance Code 2024 ↗Source checked 1 November 2026 · Primary source
The source list records when each reference was checked. AI-assisted research and drafting; no independent human legal review is claimed. Check for later changes and advice appropriate to your circumstances.