Internal control only as strong as its weakest link: Time to introspect | Daily FT

Ft · 🇱🇰 public Sri Lanka · May 01, 2026 · 2378 words

Corporate Governance Institutional Integrity Risk Management

headphones Listen to the eFinder podcast briefing

Generate a natural audio summary of this story

Daily briefing

What to know about Corporate Governance

Friday May 22, 2026 Friday, 22 May 2026 00:21 - - {{hitsCtrl.values.hits}} A post-mortem of the recent governance failures at the National Development Bank (NDB) and Sri Lanka’s Finance Ministry points to a laxity in implementing the ‘three lines of defence’…

Claims checked 4

Techniques found 3

Topics 3

Coverage spectrum

Coverage gap: Low Right coverage

Left12%

Center88%

Right0%

8 sources compared across this story cluster. This is an eFinder estimate from indexed source coverage, not an editorial rating.

What happened

Why it matters

The lapses evidence that internal control is only as strong as its weakest link, and that fraudsters are always searching for that loophole.

Common ground

When management is ‘easy’ on controls, and/or the Board remains passive, the entire ecosystem of transparency dissolves, transforming organisational character into a vehicle of institutionalised complacency.

Perspective signals

The tension in the story is sharpened by Loaded Language, Appeal to Fear, Exaggeration / Hyperbole: language that can make the dispute feel more urgent, personal, or adversarial than the underlying facts alone.

Follow-up questions

What new context would change how readers understand this Corporate Governance story?
What evidence would most clearly confirm or weaken the claim that A post-mortem of the recent governance failures at the National Development Bank (NDB) and Sri Lanka’s Finance Ministry points to a laxity in implementing the ‘three lines of defence’ model in risk management and internal control?
How does this story connect Corporate Governance with Institutional Integrity over the next few days?

open_in_new Read the original article: https://www.ft.lk/opinion/Internal-control-only-as-strong-as-its-weakest-link-Ti…

psychologyPropaganda Techniques Detected

eFinder identified 3 propaganda techniques in this article. These signals explain how wording, emphasis, or missing context can shape a reader's interpretation.

warning

Loaded Language 90% confidence

Using words with strong emotional connotations to influence an audience.

Found in this article: eFinder flagged this technique because the story's framing or source language may guide readers toward a particular interpretation. Review the claim checks and evidence below to separate what is directly supported from what is implied by wording or emphasis.

Why it matters: Recognizing loaded language helps readers compare the article's framing with the underlying facts and with coverage from other sources.

warning

Appeal to Fear 70% confidence

Building support by instilling anxiety or panic in the audience.

Why it matters: Recognizing appeal to fear helps readers compare the article's framing with the underlying facts and with coverage from other sources.

warning

Exaggeration / Hyperbole 80% confidence

Overstating facts or claims to create a stronger emotional response.

Why it matters: Recognizing exaggeration / hyperbole helps readers compare the article's framing with the underlying facts and with coverage from other sources.

fact_checkClaims Checked

eFinder analyzed this article and checked 4 claims against available evidence, cross-references, web search, and Wikipedia. Here is what the fact-checking layer found.

info Single Source 2

verified Verified 2

info

Claim 1: “A post-mortem of the recent governance failures at the National Development Bank (NDB) and Sri Lanka’s Finance Ministry points to a laxity in implementing the ‘three lines of defence’ model in risk management and internal control”

SINGLE SOURCE

While evidence confirms a massive internal fraud at Sri Lanka's National Development Bank (NDB) and a forensic audit by Deloitte, there is no evidence in the provided search results specifically mentioning a 'post-mortem' regarding the 'three lines of defence' model or the Finance Ministry's specific role in this context. The fraud is confirmed, but the specific analysis of the risk management model is not corroborated by the provided sources.

menu_book

wikipedia NEUTRAL — The Worldwide Governance Indicators (WGI) is a project that reports both aggregate and individual governance indicators for over 200 countries and territories covering the period from 1996 to 2021. It…
https://en.wikipedia.org/wiki/World_Governance_Index

menu_book

wikipedia NEUTRAL — The Asian Infrastructure Investment Bank (AIIB) is a multilateral development bank and international financial institution that aims to collectively improve economic and social outcomes in Asia. It is…
https://en.wikipedia.org/wiki/Asian_Infrastructure_Investmen…

menu_book

wikipedia NEUTRAL — The World Bank Group (WBG) is a family of five international organizations that make leveraged loans to developing countries. It is the largest and best-known development bank in the world and an obse…
https://en.wikipedia.org/wiki/World_Bank_Group

+ 3 more evidence sources

verified

Claim 2: “The Sarbanes-Oxley (SOX) methodology of Segregation of Duties entails dividing critical financial and IT responsibilities among different employees to prevent any single individual from controlling the critical nodes of a process from initiation to reconciliation.”

VERIFIED

The evidence consistently defines Segregation of Duties (SoD) as dividing responsibilities among different employees to prevent fraud and errors. Wikipedia confirms the Sarbanes-Oxley Act (SOX) mandates practices in financial record keeping and reporting, and multiple web sources link SoD as a fundamental control activity for compliance and financial reporting, which are the core pillars of SOX.

menu_book

wikipedia NEUTRAL — Internal control, as defined by accounting and auditing, is a process for assuring of an organization's objectives in operational effectiveness and efficiency, reliable financial reporting, and compli…
https://en.wikipedia.org/wiki/Internal_control

menu_book

wikipedia NEUTRAL — Separation of duties (SoD), also known as segregation of duties, is the concept of having more than one person required to complete a task. It is an administrative control used by organisations to pre…
https://en.wikipedia.org/wiki/Separation_of_duties

menu_book

wikipedia NEUTRAL — The Committee of Sponsoring Organizations of the Treadway Commission (COSO) is an organization that develops guidelines for businesses to evaluate internal controls, risk management, and fraud deterre…
https://en.wikipedia.org/wiki/Committee_of_Sponsoring_Organi…

+ 3 more evidence sources

verified

Claim 3: “Under SOX, a SoD Matrix is created to reveal overlapping and conflicting roles.”

VERIFIED

Multiple sources confirm that a Segregation of Duties (SoD) Matrix is a specific tool used to identify overlapping roles and conflicts of interest to ensure compliance. While the provided Wikipedia entry for SOX is general, the specialized web results explicitly link the SoD Matrix to IT compliance and the identification of conflicting roles.

menu_book

travel_explore

web search NEUTRAL — Identify SoD Conflicts Using an SoD Matrix. A Segregation of Duties control matrix as in Garancy is a useful tool for making potential conflicts of interest in roles and processes transparent.
https://www.betasystems.com/resources/blog/segregation-of-du…

+ 2 more evidence sources

info

Claim 4: “The SOX methodology also ensures that developers of information technology-enabled and other automated systems cannot move code into production without specific authorisation, separating system access from user duties.”

SINGLE SOURCE

The provided evidence for this claim consists of general descriptions of the Sarbanes-Oxley Act and a YouTube video title, but none of the provided snippets specifically mention the prohibition of developers moving code into production without authorization or the separation of system access from user duties.

travel_explore

web search NEUTRAL — The Sarbanes–Oxley Act's effect on non-U.S. companies cross-listed in the U.S. is different on firms from developed and well regulated countries than on firms from less developed countries according t…
https://en.wikipedia.org/wiki/Sarbanes–Oxley_Act

travel_explore

web search NEUTRAL — About Press Copyright Contact us Creators Advertise Developers Terms Privacy Policy & Safety How YouTube works Test new features.
https://www.youtube.com/watch?v=wZ8xDBgMat8

travel_explore

web search NEUTRAL — The Sarbanes-Oxley Act of 2002 (SOX) is a federal law that aims to protect...
https://www.investopedia.com/terms/s/sarbanesoxleyact.asp

info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.