Risk Governance Under King Iv.
1. Introduction to King IV and Risk Governance
King IV Report on Corporate Governance for South Africa is a principles-based corporate governance framework applicable in South Africa.
- Published by the Institute of Directors in Southern Africa
- Effective from 2016
- Applies to:
- Listed companies
- State-owned enterprises
- Private and non-profit organizations
Core Idea
King IV adopts an “apply and explain” approach, requiring organizations to demonstrate how governance principles—including risk governance—are implemented.
2. Concept of Risk Governance under King IV
Risk governance refers to:
The system by which the governing body ensures that risks are identified, assessed, managed, and monitored in a way that supports the organization’s strategic objectives.
3. Key King IV Principle on Risk (Principle 11)
Principle 11:
“The governing body should govern risk in a way that supports the organisation in setting and achieving its strategic objectives.”
4. Core Elements of Risk Governance
(A) Governing Body Responsibility
- The board retains ultimate responsibility for risk governance.
- Cannot delegate accountability (only implementation).
(B) Risk Appetite and Tolerance
- Board must define:
- Risk appetite (acceptable level of risk)
- Risk tolerance (acceptable deviations)
(C) Risk Policy and Plan
- Establish:
- Risk management framework
- Risk policies aligned with strategy
(D) Risk Oversight Structures
- Typically includes:
- Risk committee
- Audit committee
(E) Combined Assurance Model
- Integration of:
- Internal audit
- External audit
- Risk management functions
(F) Continuous Monitoring
- Ongoing identification and mitigation of risks:
- Strategic
- Operational
- Financial
- Compliance
5. Risk Governance Process under King IV
Step 1: Risk Identification
- Identify internal and external risks.
Step 2: Risk Assessment
- Evaluate likelihood and impact.
Step 3: Risk Response
- Accept, mitigate, transfer, or avoid risk.
Step 4: Risk Monitoring
- Continuous oversight and reporting.
Step 5: Disclosure
- Transparent reporting in integrated reports.
6. Integration with Strategy
King IV emphasizes:
- Risk governance must be embedded in strategic planning
- Organizations must:
- Balance risk and opportunity
- Align risk-taking with long-term value creation
7. Technology and Information Risk
King IV integrates risk governance with:
- IT governance (Principle 12)
- Cybersecurity risks
- Data protection risks
8. Legal Nature of King IV
- It is not legally binding, but:
- Influences stock exchange listing requirements
- Used as a benchmark by courts and regulators
- Non-compliance may indicate poor governance
9. Key Case Laws (Comparative Jurisprudence)
Although King IV is South African, courts globally provide principles relevant to risk governance:
1. Howard v Herrigel (1991) (South Africa)
- Principle: Directors must exercise independent judgment in managing risks.
- Reinforces board accountability under governance frameworks like King IV.
2. Fisheries Development Corporation of SA Ltd v Jorgensen (1980)
- Principle: Directors must act with due care, skill, and diligence in risk-related decisions.
3. Re Barings plc (No 5) (1999)
- Principle: Failure of risk oversight leads to director liability.
- Demonstrates consequences of weak risk governance structures.
4. Lexi Holdings plc (In Administration) v Luqman (2009)
- Principle: Directors liable for failing to supervise risk controls.
5. Stone & Rolls Ltd v Moore Stephens (2009)
- Principle: Corporate risk mismanagement may be attributed to the company itself.
6. Caparo Industries plc v Dickman (1990)
- Principle: Duty of care in financial reporting and risk disclosure.
7. Daniels v Anderson (1995) (Australia)
- Principle: Directors must actively monitor company affairs and risk exposure.
- Aligns strongly with King IV expectations.
10. Practical Implementation Considerations
(1) Board Engagement
- Active participation in:
- Risk identification
- Monitoring
(2) Risk Culture
- Promote awareness across organization.
(3) Documentation
- Maintain:
- Risk registers
- Policies
- Reports
(4) Combined Assurance
- Ensure coordination among:
- Internal audit
- Compliance
- Risk management
(5) Continuous Improvement
- Regular review of risk frameworks.
11. Advantages of King IV Risk Governance
- Holistic risk management
- Improved strategic alignment
- Enhanced stakeholder confidence
- Better regulatory compliance
12. Challenges
- Implementation complexity
- Resource constraints
- Measuring qualitative risks
- Integrating across large organizations
13. Conclusion
Risk governance under King IV represents a modern, integrated, and principles-based approach where:
- The board is central to risk oversight
- Risk is linked to strategy and performance
- Governance focuses on value creation, not just compliance
The supporting case law consistently emphasizes that:
👉 Failure to manage and oversee risk effectively can lead to director liability and corporate failure, reinforcing the importance of King IV’s framework.

comments