Independent Practitioner’s Assurance Report
To the Management of Tieto Corporation
We have been engaged by the Management of Tieto Corporation (hereinafter also the Company) to perform a limited assurance engagement on selected Corporate Responsibility disclosures for the reporting period 1 January to 31 December 2016, disclosed in Tieto Corporation’s Annual Report 2016 (hereinafter Corporate Responsibility Information). In terms of the Company’s GRI G4 reporting and G4 Content Index, the scope of the assurance has covered economic, social and environmental Corporate Responsibility disclosures listed within the Specific Standard Disclosures as well as General Standard Disclosures G4-10 and G4-11.
The Management of Tieto Corporation is responsible for preparing the Corporate Responsibility Information in accordance with the Reporting criteria as set out in the Company’s reporting instructions and the G4 Sustainability Reporting Guidelines of the Global Reporting Initiative. The Management of Tieto Corporation is also responsible for such internal control as the management determines is necessary to enable the preparation of the Corporate Responsibility Information that is free from material misstatement, whether due to fraud or error.
Practitioner’s independence and quality control
We have complied with the independence and other ethical requirements of the Code of Ethics for Professional Accountants issued by the International Ethics Standards Board for Accountants, which is founded on fundamental principles of integrity, objectivity, professional competence and due care, confidentiality and professional behaviour.
PricewaterhouseCoopers Oy applies International Standard on Quality Control 1 and accordingly maintains a comprehensive system of quality control including documented policies and procedures regarding compliance with ethical requirements, professional standards and applicable legal and regulatory requirements.
Our responsibility is to express a limited assurance conclusion on the Corporate Responsibility Information based on the procedures we have performed and the evidence we have obtained. Our assurance report has been prepared in accordance with the terms of our engagement. We do not accept, or assume responsibility to anyone else, except to Tieto Corporation for our work, for this report, or for the conclusions that we have reached.
We conducted our limited assurance engagement in accordance with the International Standard on Assurance Engagements (ISAE) 3000 (Revised) “Assurance Engagements Other than Audits or Reviews of Historical Financial Information”. That standard requires that we plan and perform the engagement to obtain limited assurance about whether the Corporate Responsibility Information is free from material misstatement.
In a limited assurance engagement the evidence-gathering procedures are more limited than for a reasonable assurance engagement, and therefore less assurance is obtained than in a reasonable assurance engagement. An assurance engagement involves performing procedures to obtain evidence about the amounts and other disclosures in the Corporate Responsibility Information. The procedures selected depend on the practitioner’s judgement, including an assessment of the risks of material misstatement of the Corporate Responsibility Information.
Our work consisted of, amongst others, the following procedures:
- Interviewing senior management of the Company.
- Visiting the Company’s Head Office as well as one site in Sweden.
- Conducting one video interview with one site in India.
- Interviewing employees responsible for collecting and reporting the Corporate Responsibility Information at the Group level and at the site level where our site visits took place.
- Assessing how Group employees apply the Company’s reporting instructions and procedures.
- Testing the accuracy and completeness of the information from original documents and systems on a sample basis.
- Testing the consolidation of information and performing recalculations on a sample basis.
Limited assurance conclusion
Based on the procedures we have performed and the evidence we have obtained, nothing has come to our attention that causes us to believe that Tieto Corporation’s Corporate Responsibility Information for the reporting period ended 31 December 2016 is not properly prepared, in all material respects, in accordance with the Reporting criteria.
When reading our assurance report, the inherent limitations to the accuracy and completeness of corporate responsibility information should be taken into consideration.
Helsinki, 27 February 2017
Sustainability & Climate Change