Konecranes’ Internal Audit is an independent unit, which assists the organization in achieving its objectives. The unit evaluates the efficiency of risk management, control and governance processes.
Internal Audit operates according to an audit plan approved by the Board’s Audit Committee. The unit’s working methods are based on the professional standards laid down by the Institute of Internal Auditors (IIA) and focus on process-oriented engagement rather than solely entity-based auditing. Internal audit results are reported to the audited units’ operative management, local subsidiaries’ Chair of the Board (internal Board) and relevant KLT members. Remediation follow-ups are coordinated by Internal Audit and Group Internal Controls. Remediated findings are verified by Internal Audit in separate re-audits.
In 2025, the Internal Audit conducted 43 planned audits according to an approved annual audit plan. The approach to planning and conducting internal audits is risk-based, based on a country-specific risk analysis. The internal audit approach was changed from a revenue-based to a clearly more risk-based approach in 2024. As a part of the ongoing risk assessment process, the plan was specified during the year. Internal audits in 2025 generally covered applicable key controls 51 and on a risk basis selected operational controls 38. Also, sample sizes varied from limited to wide based on the analyzed risk level. The internal audit annual plan covered 36% percent of active operational legal entities, all Financial Service Centers (FSSC) in Tallinn, Xiamen and Klang, and selected centralized functions, such as Global IT Services, Centralized Finance Services in China and a Procurement Service Center in India. Additionally, Internal Audit participated in an Authorized Economic Operator (AEO) customs audit in China.
All Internal Audit activities are reported to the Konecranes Leadership Team and the Board’s Audit Committee on a regular basis. Internal Audit is responsible to the Audit Committee.