SNL Employee Portal
Financial & Risk Oversight Authority (FROA) [ Financial Integrity • Enterprise Risk Oversight • Capital Protection ]
Authority to certify financial statements, enforce internal controls, approve risk mitigation strategy, oversee insurance coverage, and escalate material financial or control failures to Executive Leadership and Audit Committee
Authority Applied Using
Financial Control Framework (FCF – Control Architecture) [ Accounting Standards • Approval Thresholds • Segregation of Duties • ICFR ]
Control framework defining financial and transactional requirements — not an Org role or function

• Revenue recognition & expense policy
• Capitalization thresholds
• Delegation of authority matrix
• Accounts payable authorization controls
• General ledger reconciliation standards
• IT access & financial systems controls
• SOX / internal control compliance (if applicable)
Enterprise Risk & Assurance Framework (ERAF) [ Risk Governance • Insurance Oversight • Audit Structure • Mitigation Standards ]
System-level governance framework — not an Org role or function

• Enterprise risk management methodology
• Risk register & mitigation tracking
• Insurance strategy & coverage governance
• Internal audit charter & testing methodology
• Business continuity governance
• Issue escalation & remediation standards
Operational Execution
Illustrative Financial, Risk & Technology Process Families [ Executed by Operations • Governed by Frameworks • Independently Assured by Internal Audit ]

Oversight bodies provide governance and assurance; they do NOT execute daily transaction processing.

Accounts Payable (AP) Invoice intake, coding, validation, approval workflow, and disbursement
Financials (GL & Reporting) Journal entries, reconciliations, close process, consolidation, financial reporting
FP&A Budgeting, forecasting, performance analysis, variance reporting
Insurance Administration Policy management, renewals, claims coordination, coverage tracking
Risk Management Risk identification, mitigation tracking, compliance reporting
IT – Financial Systems ERP administration, system configuration, access provisioning, security controls
Process Improvement Workflow optimization, automation, control strengthening, continuous improvement
Control Exception or Risk Event Identified During Operations
Assurance & Remediation Process Families (Administered Independently) [ Independent Assurance & Risk Governance – Does NOT Execute Daily Transactions ]
Control Testing • Risk Evaluation • Remediation Oversight • Escalation Enablement
Internal Audit
Financial audits, operational audits, IT audits, control effectiveness testing
Control Exception Management
Documentation, impact analysis, root cause assessment, materiality evaluation
Corrective Action & Control Strengthening
Remediation plans, policy updates, automation, monitoring enhancement
Insurance & Loss Escalation
Claims governance, financial exposure assessment, coverage validation
Policy & Framework Management
Financial policy lifecycle, risk framework updates, regulatory alignment
Training & Qualification
Financial controls training, IT security certification, compliance education

Operations execute financial and risk activities; Governance frameworks define control requirements; Internal Audit independently assures effectiveness under CFO and Audit Committee oversight.

Enterprise Financial & Risk Governance Framework

The Financial Control Framework and Enterprise Risk & Assurance Framework provide the formal governance structure for financial integrity, risk mitigation, insurance oversight, IT control, and process optimization. These frameworks ensure disciplined execution, control effectiveness, and independent assurance.

  • Internal controls over financial reporting (ICFR)
  • Enterprise risk identification and mitigation governance
  • Insurance strategy and exposure management
  • Internal audit independence and assurance lifecycle
  • IT system access and financial data integrity controls
  • Continuous improvement and control optimization processes

Governance frameworks define requirements and oversight mechanisms; they do not execute transactional activities. Independent assurance ensures financial accuracy, risk visibility, and sustained control effectiveness.