This section reports on the control results and other relevant information that supports management's assurance on the achievement of the financial management and internal control objectives. It includes information necessary to establish that the available evidence is reliable, complete, and comprehensive. It covers all activities relevant to the Chips Joint Undertaking.
The revised internal control framework of the Chips JU was adopted by the Governing Board (GB) in August 2020 (Decision GB 2021.02, Annex 11). The revised Internal Control Framework is based on the framework adopted by the European Commission that consists of five internal control components and 17 principles based on the COSO 2013 Internal Control-Integrated Framework.
The revised internal control framework considers the structure and size of the Chips JU, the nature of its tasks, and the financial and operational risks involved. The Executive Director and other members of the Chips JU’s management, together with the Internal Control and Audit Manager and the Chips JU staff at all levels ensure the implementation of the internal control framework.
The priority objective remains to implement and maintain an effective internal control framework so that reasonable assurance can be given that resources assigned to the activities are used according to the principle of sound financial management and control procedures in place give the necessary guarantees concerning the legality and regularity of transactions. The implementation of the internal control framework is assessed by the internal auditor (Internal Audit Service of the Commission) and the internal audit capability. At this point in time, controls are present and are assessed as functioning effectively.
Control results
The Chips JU has a clear control strategy, which is multiannual in nature and combines ex-ante and ex-post controls while taking cost-efficiency into consideration.
Conclusion on the cost-effectiveness of controls
Based on the key indicators for legality and regularity of transactions, the key indicators for efficiency and for economy, the Chips JU has assessed the effectiveness, efficiency and economy of its control system and reached a positive conclusion on the cost-effectiveness of its control system.
Audit observations and recommendations
Internal Audit
Internal Audit Service
ÂThe IAS of the European Commission performs the role of Internal Auditor of the Chips JU. In 2022, the IAS carried out an in-depth risk assessment which led to the establishment of a strategic internal audit plan for the period 2023-2025.
Based on the 2023-2025 internal audit plan, the IAS performed an audit on HR management and ethics in 2024. The final audit report was issued in January 2025 and included three very important recommendations on the ethics framework, staff wellbeing and recruitment. The Chips JU has accepted all recommendations and will implement an action plan in 2025.
Considering the significant impact of the Chips Act on the Chips JU in term of additional EU budget (+ EUR 2.375 billion), new programme (DEP) and new activities (Pilot Lines, Design Platform, Competences Centres), IAS has decided to re-perform an in-depth risk assessment in 2025 to prepare the 2026-2028 strategic internal audit plan. The strategic internal audit plan will be subject to an annual review and the topics may be adjusted or new topics may be added to reflect any new and emerging risks as well as significant changes in the Chips JU processes.
Internal Audit Capability
Based on Article 32(2) of the SBA establishing the Chips JU and Article 30 of the Chips JU Financial Rules, the Governing Board established an Internal Audit Capability which provides independent, objective assurance to the Executive Director as to the effectiveness and efficiency of risk management, control and process in the Chips JU as defined in the Internal Audit Capability charter. The Internal Audit Capability is performed by the Internal Control and Audit Manager (ICAM). In January 2024, the IAC work plan for 2024 was approved by the Governing Board. The main activities in audit focused on coordinating the audit on HR management and ethics carried out by the IAS, on coordinating and following-up the audits carried out by the European Court of Auditors, the external auditor (Ernst & Young) and the Chips JU ex-post audits as per H2020 and HE Common Audit Strategies. The main activities in internal controls focused on performing the annual general risk management (please refer to section 4.3.2) and the annual self-assessment of the effectiveness of the Chips JU Internal Control Framework.
Audit of the European Court of Auditors
For the financial year ended 31 December 2023, the European Court of Auditors issued an unqualified (“clean”) audit opinion on the accounts of the Chips JU and on the legality and regularity of the payments and revenue underlying the 2023 annual accounts. The report concluded the following: • The Chips JU accounts for the year ended 31 December 2023 present fairly, in all material respects, the financial position of the Chips JU, the results of its operations, its cash flow and changes in net assets for 2023, in accordance with its Financial Rules and the accounting rules adopted by the Commission’s accounting officer which are based on internationally accepted accounting standards for the public sector. • The revenues underlying the accounts for 2023 are legal and regular in all material respects. • The payments underlying the accounts for 2023 are legal and regular in all material respects.
Without calling into question the European Court of Auditors´ unqualified opinion, ECA made observations on budgetary management and administrative procurement procedure. The Chips JU measures to address these observations are monitored by the Court. The report also included a follow-up of previous years observations which were all completed except common observations to Joint Undertakings on time recording, staff need assessment and risk-based grant management. Regarding management and control systems, ECA reported that their 2023 audits of randomly selected Chips JU payments to Horizon 2020 beneficiaries revealed no error. The full report, including the Chips JU’s replies, can be found here: Annual report on EU Joint Undertakings for the financial year 2023 The ECA report for the financial year 2024 is expected in the fourth quarter 2025.
Overall Conclusions
For the financial year ended 31 December 2023, the European Court of Auditors issued an unqualified (“clean”) audit opinion on the accounts of the Chips JU and on the legality and regularity of the payments and revenue underlying the 2023 annual accounts. The report concluded the following: • The Chips JU accounts for the year ended 31 December 2023 present fairly, in all material respects, the financial position of the Chips JU, the results of its operations, its cash flow and changes in net assets for 2023, in accordance with its Financial Rules and the accounting rules adopted by the Commission’s accounting officer which are based on internationally accepted accounting standards for the public sector. • The revenues underlying the accounts for 2023 are legal and regular in all material respects. • The payments underlying the accounts for 2023 are legal and regular in all material respects.
Without calling into question the European Court of Auditors´ unqualified opinion, ECA made observations on budgetary management and administrative procurement procedure. The Chips JU measures to address these observations are monitored by the Court. The report also included a follow-up of previous years observations which were all completed except common observations to Joint Undertakings on time recording, staff need assessment and risk-based grant management. Regarding management and control systems, ECA reported that their 2023 audits of randomly selected Chips JU payments to Horizon 2020 beneficiaries revealed no error. The full report, including the Chips JU’s replies, can be found here: Annual report on EU Joint Undertakings for the financial year 2023 The ECA report for the financial year 2024 is expected in the fourth quarter 2025.
Assessment of the effectiveness of internal control (IC) systems
According to Article 14 of the Chips JU Financial Rules and Article 36 of the EU Financial Regulation, the internal control framework is designed to provide reasonable assurance regarding the achievement of the following five objectives: (1) effectiveness, efficiency and economy of operations; (2) reliability of reporting; (3) safeguarding of assets and information; (4) prevention, detection, correction and follow-up of fraud and irregularities, and (5) adequate management of the risks relating to the legality and regularity of transactions, taking into account the multiannual character of programmes as well as the nature of the payments concerned. As an entrusted body implementing the EU Budget, the Chips JU needs to ensure a proper management and control mechanism in accordance with Article 36 of the EU Financial Regulation and provide a level of assurance from its systems at least equivalent to the one of the European Commission. Since 2020, the JU has implemented the new Internal Control Framework proposed by the EC (GB Decision No 2021.02). In 2024, the Chips JU has assessed the effectiveness of its internal control systems based on the revised framework. The overall objective of the self-assessment exercise was to understand if all principles were present and functioning.
The Internal Control and Audit Manager of the Chips JU has performed an assessment of the entire internal control system of the Chips JU. The assessment is based on an evaluation of monitoring indicators defined in the revised Internal control framework and an analysis of information from various sources: • the indicators set out in the Internal Control Framework of the Chips JU for the 17 internal control principles (including the representative and residual error rates for Horizon 2020); • interviews with the management team and key staff members on the control activities and objectives of the Chips JU; • staff survey on internal controls; • the register on exceptions and non-compliance events. The Chips JU keeps a register of exceptions and non-compliance events to manage and monitor deviations from established processes and procedures. All deviations reported are recorded in the register and analysed to identify any control failures; • the observations and recommendations reported by the Internal Audit Service; • the observations and recommendations reported by the European Court of Auditors; • the report on periodic validation of Chips JU users access rights granted in ABAC.
The Chips JU has assessed the internal control system during the reporting year and has concluded that it is effective and that the components and principles are present and functioning as intended but the following main improvements had to be implemented: • Component “Control environment” A policy on managing sensitive function was adopted on 05/06/2024 by the ED decision No 2024.179. • Component "Risk assessment” The Chips JU anti-fraud strategy was updated, please refer to section 4.1.1.2 for further information. • Component "Control activities” The Joint Undertakings business continuity plan and disaster recovery plan was updated by a new plan adopted by the Joint Undertakings located in the White Atrium on 16/12/2024. A procedure for managing the new Chips JU activity in pilot lines was adopted on 27/01/2025 by the ED decision No 2024.227. A Chips JU risk-based ex-ante control strategy and implementation guidance were approved by the ED (Ares(2025)491505). • Component "Information & Communication” The mandatory information on recipients of EU funds (in accordance with Article 15.3 of the Chips JU financial rules) was made public by 30/06/2024.
Continuous monitoring
Continuous monitoring in the Chips JU is coordinated by the Internal Control and Audit Manager. Identified improvements during the self-assessment of the internal control system are followed up during the year, as per timeframe indicated in the relevant actions.
Without calling into question the European Court of Auditors´ unqualified opinion, ECA made observations on budgetary management and administrative procurement procedure. The Chips JU measures to address these observations are monitored by the Court. The report also included a follow-up of previous years observations which were all completed except common observations to Joint Undertakings on time recording, staff need assessment and risk-based grant management. Regarding management and control systems, ECA reported that their 2023 audits of randomly selected Chips JU payments to Horizon 2020 beneficiaries revealed no error. The full report, including the Chips JU’s replies, can be found here: Annual report on EU Joint Undertakings for the financial year 2023 The ECA report for the financial year 2024 is expected in the fourth quarter 2025.
Risk assessment and management
Risk Management is one of the key elements in an effective internal control framework. The JU systematically analyses the risks in relation to its main activities at least once a year, develops action plans to address them and assigns staff responsible for implementing those plans. A risk is defined as "any event or issue that could occur and adversely impact the achievement of the Joint Undertaking´s, strategic and operational objectives. Lost opportunities are also considered as risks". Hence, risks relate to the non-achievement of objectives. In 2024, the Internal Control and Audit Manager of the Chips JU coordinated the annual risk assessment with the management team and as a result the risk register was updated with appropriate mitigating measures. The risk register documents the most significant risks and provides a record of risks and measures taken to manage them. Risks are assessed in terms of impact and likelihood, mitigation actions are proposed to reduce the probability of the risk materialising, or the severity of the exposure should the risk occur, owners of mitigating actions are identified and deadlines set.
Prevention of Conflict of Interest
Prevention of conflict of interests is addressed at different levels in the Chips JU. Boards members (PAB and GB) are asked to sign a declaration of interests at the time of their nomination. Signature of this declaration is a condition to access the documents and be invited to the meetings. At the beginning of each meeting, the Chair makes sure that no delegate is concerned by a specific conflict of interest. The rules of procedure of the concerned Boards include the relevant provisions on conflict of interests. Experts in evaluation procedures are requested to sign a declaration of absence of conflict of interests before accessing project proposals to be evaluated. Potential conflicts are solved by limiting access to some proposals. Members of evaluation and selection committees in procurement and recruitment procedures must also sign a declaration of absence of conflict of interests. Finally, staff members of the Chips JU at the time of recruitment sign a declaration of interests and a declaration of commitment and independence.
