43
−
Preparation protocol of the telematic file and dispatch to the Mercantile
Register of the Group companies' financial statements.
The review of the financial information is carried out by both senior management
and by external and internal auditors and, in the last instance, by the Audit and
Control Committee.
In addition, the control activities are mainly aimed at preventing, detecting,
mitigating, compensating for, and correcting the potential errors or errors that have
been discovered in adequate time before the reporting and publication of the
financial information.
F.3.2.
Internal control policies and procedures on the information systems (among others,
on access security, change control, the operation thereof, operating continuity and
unbundling) which support the entity's relevant processes in relation to the
preparation and publication of financial information.
The Atresmedia Group implements part of the controls defined to mitigate the risks
related with the ICFR, either by people responsible therefor and/or by semi-
automatic controls performed by IT systems.
Many of the functions that support the relevant steps in the preparation of the
financial information are semi-automated in the management and reporting systems
– mainly SAP – implemented at the Group. Likewise, a series of control and review
procedures have been defined of all the information transfers between different
Group management systems and the correct integration in the transactional financial
system-SAP. On a monthly basis, all the information transfers between systems are
specifically reviewed and are particularly reconciled in the event any incident arises
in the automatic transfer of information between systems.
Controls have been designed and put in place regarding access and user profiles for
the IT and communication systems that have an impact on the financial information
and the accounting closes, which guarantee the security of access to data and
programs, and control over changes, the correct operation of the changes and their
continuity. An IT security corporate policy exists which guarantees secure access to
the management and reporting systems and monitors any error and/or problem
which may appear.
Likewise, a policy involving profiles and the unbundling of functions has been
defined, which is periodically reviewed by the Systems Department, the Financial
Department and the Internal Audit Department.
F.3.3.
Internal control policies and procedures in place to supervise the management of
activities subcontracted to third parties, and to monitor the evaluation, calculation
and valuation activities of independent experts, which may have a material effect on
the financial statements.
The Atresmedia Group has defined a procedure to acquire goods and services, and a
Purchase Committee, which regulates the arrangement of services with third parties.
These controls ensure that independence exists with regard to the supplier hired and
that the service is arranged at market prices.
Similarly, the Atresmedia Group has internal control policies and procedures in place to
supervise the management of the activities subcontracted to third parties, and to
monitor the evaluation, calculation and appraisal matters entrusted to independent
experts, which may have a material effect on the financial statements.
F.4
Information and communication
Report highlighting their main characteristics, if they have at least:
F.4.1.
A specific function charged with defining, keeping accounting policies up to date
(accounting policies area or department) and resolving doubts or conflicts arising