Audit and control
Auditors
Pursuant to the Articles of Association, the Company must have one or two auditors with or without deputy auditors. The 2024 AGM elected PwC, with Authorised Public Accountant Camilla Samuelsson, as the Company’s Auditor.
The auditor reported her audit of the financial statements for 2024 at the Board meeting of 20 February 2025. The audit of the 2024 Annual- and Sustainability Report was reported on March 27, 2025.
Financial reporting, internal control and risk management
The Board is ultimately responsible for ensuring that there is good internal control within the Stockholm Exergi Group in accordance with applicable directives, laws and regulations. The Company is not subject to the requirements of the Swedish Corporate Governance Code. Internal control work is carried out within the Group aimed at ensuring that operations are carried out in an appropriate, safe and efficient manner. Internal control of financial reporting aims to ensure that the Group prepares reliable financial accounts and reports and complies with applicable laws and regulations. Internal control is conducted in accordance with the risk policy resolved on by the Board. The risk policy is based on the principles set out by the Committee of Sponsoring Organizations of the
Treadway Commission (COSO).
Risk assessment and control environment
The CEO is responsible for preparing internal control and financial reporting matters for the Board. Control work is based on the division of responsibilities between the Board and the CEO as established in the CEO’s instructions and reporting requirements set by
the Board.
The Board and CEO work in a structured annual cycle for strategic business planning and operational supervision. The process is based on the Group’s vision and operating concept, which in turn is based on the owners’ consortium agreement. Work within the Group is performed in accordance with Boardresolved codes of conduct and values: curiosity, initiative, and accountability. Risk management is an integral and
ongoing component of Group business planning, development and performance
management.
For each risk category, risk management follows the following steps: identification, assessment, management, control and monitoring. The Board resolves on risk policy and the CEO’s risk mandate. Risk management and its processes are continuously developed and adapted to evolving market conditions and changes in the business.
Read more about risks and risk management
Governing documents and procedures
Policies and delegation arrangements are in place for the Group’s various areas
of operation. These are established and revised annually and otherwise as required by the Board. Various governing documents are also adopted and revised on an ongoing basis by the CEO, as well as manuals and procedural descriptions that are established and revised by the respective operational manager. Overall, these internal regulations effectively cover all relevant areas of operation.
Review
The Group’s internal audit function reviews ongoing operations. The Audit Committee has a special supervisory remit and reviews the internal audit’s work, as well as risk management and internal controls. Read more about risks and risk management on pages 28-30.


