10. Property Law, Compliance, Governance and Ethics

Introduction and Context

Property and facility management is often described as an operational discipline concerned with buildings, occupants, services, maintenance and costs. In practice, however, every significant property decision is also a legal, governance and ethical decision. Leasing space, appointing a contractor, collecting service charges, storing access records, carrying out alterations, managing hazardous materials, renewing insurance or responding to a complaint can create obligations to owners, occupiers, employees, visitors, regulators, neighbours, lenders and the wider community.

The legal environment of property management is necessarily jurisdiction-specific. Land registration, lease law, planning controls, building regulations, fire safety, environmental protection, employment law, taxation, insurance and privacy requirements differ between countries and sometimes between cities. A professional manager must therefore distinguish universal management principles from rules that require local legal advice. The purpose of this chapter is not to substitute for legal counsel, but to develop a framework for identifying obligations, allocating responsibility, producing evidence of compliance and making defensible decisions.

Property law establishes who may own, occupy, use, transfer, mortgage or control property. Compliance converts statutory and contractual requirements into operating practices. Governance determines who is accountable for decisions and how those decisions are monitored. Ethics addresses the quality of conduct where legal rules are incomplete, ambiguous or capable of manipulation. Effective property management integrates all four dimensions rather than treating them as separate administrative functions.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish ownership rights from occupier, manager and contractor obligations.

2. Explain the legal and operational significance of leases, licences, easements, covenants and statutory controls.

3. Design a compliance framework covering building safety, environmental responsibilities, insurance, records and audits.

4. Apply governance principles of accountability, transparency, segregation of duties and oversight.

5. Analyse conflicts of interest, corruption risks, confidentiality issues and ethical dilemmas in property operations.

6. Evaluate the use of digital records, access systems, analytics and artificial intelligence while protecting privacy and data integrity.

7. Recommend defensible actions in complex property-management scenarios.

The Legal Architecture of Property Management

Property law is not limited to the title deed. It includes the rules governing the creation, transfer, use, enjoyment and protection of interests in land and buildings. The central legal question is not simply “Who owns the property?” but “What bundle of rights and obligations exists, who holds each element, and what restrictions apply?”

Ownership, possession and control

Ownership generally provides rights to possess, use, lease, sell, mortgage or exclude others, subject to law and to interests held by other parties. These rights may be divided. A landlord may retain ownership while granting a tenant possession for a fixed term. A lender may hold security over the property without occupying it. A facilities manager may exercise day-to-day control under a management agreement without possessing ownership rights. A public authority may impose planning, heritage, safety or environmental restrictions.

The distinction between ownership and control is strategically important. A manager who instructs a contractor, closes an unsafe area or authorises expenditure is exercising delegated authority. That authority should be documented, limited and reviewable. Acting beyond a mandate may expose the owner, management company and individual decision-maker to contractual, civil, regulatory or disciplinary consequences.

Leases, licences and occupancy arrangements

A lease usually grants an interest in property and a right of exclusive possession for a defined period, subject to rent and other conditions. A licence generally grants permission to use space without creating the same proprietary interest or exclusive possession. The legal classification depends on the substance of the arrangement and applicable law, not merely on its title.

A well-administered lease normally identifies the premises, term, rent, deposits, permitted use, repair obligations, insurance, alterations, assignment and subletting, compliance duties, access rights, service charges, default remedies, renewal and termination procedures. Ambiguous clauses often become operational disputes. For example, a lease may state that the tenant is responsible for “internal repairs” without clarifying responsibility for concealed services, shopfronts, mechanical equipment or damage caused by common systems.

Managers should maintain an obligation matrix showing, for each important duty, the responsible party, required frequency, evidence, escalation route and consequence of failure. The matrix should cover both express contractual clauses and obligations implied by law. It should also identify obligations shared between owner and occupier, because shared responsibility is a frequent source of non-compliance.

Easements, covenants and shared property

An easement gives one property or person a defined right over another property, such as access, drainage, light, utilities or parking. Covenants are promises affecting the use or maintenance of property. In multi-occupied developments, title documents, development agreements and building rules may regulate signage, noise, operating hours, loading, waste storage, alterations and the use of common areas.

A manager should review these instruments before approving changes to access routes, plant rooms, parking layouts, external signage or service infrastructure. An apparently minor alteration can obstruct a legal right, breach a covenant or interfere with emergency access. Property records should therefore contain not only leases but also title plans, easements, restrictions, consents, guarantees and approved drawings.

Occupier Obligations and Building Compliance

Compliance is best understood as a continuous management system rather than a certificate kept in a file. It begins with identifying applicable obligations, assigning responsibility, implementing controls, checking performance, correcting deficiencies and retaining evidence.

Building, fire and life-safety duties

Building regulations commonly address structural integrity, means of escape, accessibility, electrical systems, ventilation, sanitation, lifts, fire resistance and the performance of alterations. Fire-safety regimes may require risk assessments, alarms, emergency lighting, evacuation plans, drills, clear escape routes, maintenance of fire doors and control of combustible materials. Responsibility can be divided among owners, employers, occupiers, building managers and specialist contractors.

A certificate does not guarantee continuing compliance. A compliant building may become unsafe when a tenant changes its layout, stores hazardous materials, blocks an escape route or overloads electrical circuits. Consequently, compliance inspections should examine actual use as well as design documentation. Findings should be graded according to severity, likelihood, affected persons, legal exposure and urgency of remedy.

Accessibility should be addressed as a legal and service-quality responsibility. It includes physical access, circulation, sanitary facilities, signage, emergency procedures and reasonable adjustments for users with disabilities. A manager who treats accessibility as a one-time construction issue may overlook operational barriers such as locked accessible entrances, defective lifts or inaccessible emergency information.

Health, safety and contractor control

Facility operations involve maintenance, cleaning, construction, security, waste handling and work at height. Managers must establish procedures for contractor selection, competence verification, induction, permits to work, isolation of energy sources, supervision, incident reporting and emergency response. A contract that transfers operational work does not automatically eliminate the owner’s or occupier’s statutory duty to manage foreseeable risks.

Contractor governance should include prequalification, insurance verification, method statements where appropriate, risk assessments, evidence of training, performance reviews and close-out documentation. Lowest price is not a sufficient procurement criterion where poor competence could create serious harm or regulatory exposure.

Environmental compliance

Environmental obligations may concern planning, contaminated land, hazardous substances, air emissions, water discharge, noise, waste, energy performance, refrigerants, asbestos and protected habitats. Their application depends on the property and its use. A warehouse, hospital, shopping centre and office building will have different environmental risk profiles.

Environmental management should follow a life-cycle approach. During acquisition, due diligence may identify contamination, flood exposure, protected features or liabilities attached to historic uses. During operation, managers monitor energy, water, waste, emissions and incidents. During refurbishment, they control hazardous materials, construction waste and pollution pathways. At disposal, they preserve evidence of remediation and compliance.

Sustainability reporting requires particular care. Claims about carbon reduction, renewable energy or environmental performance should be supported by defined boundaries, reliable data and transparent assumptions. Selective disclosure may create reputational and legal risk even where individual figures are technically accurate.

Insurance and Allocation of Risk

Insurance is a financial risk-transfer mechanism, not a substitute for prevention. Property policies may cover physical damage; liability policies may address injury or third-party property damage; business interruption policies may address loss of income after an insured event; professional indemnity may apply to specified professional services; workers’ compensation and employer-liability arrangements may be required by law. The precise scope depends on policy wording, exclusions, deductibles, limits and jurisdiction.

A property manager should maintain an insurance schedule identifying the insured party, asset or activity, policy period, limits, deductibles, exclusions, notification requirements and responsible reviewer. Lease provisions should be reconciled with policies. For example, a lease may require a tenant to insure its contents and business interruption while the owner insures the structure and common areas. Gaps arise when each party assumes that the other has covered a particular risk.

Claims management requires prompt notification, preservation of evidence, mitigation of further loss, cooperation with adjusters and accurate records. Unauthorised admissions of liability or disposal of damaged equipment may prejudice a claim. At the same time, an ethical manager must not exaggerate loss or conceal relevant facts. Renewal decisions should use incident history, asset condition, business criticality and risk-improvement measures rather than simply selecting the cheapest premium.

Records, Evidence and Data Responsibilities

Records perform three functions: they support operations, demonstrate compliance and preserve institutional memory. Important records include title and lease documents, approvals, inspections, risk assessments, maintenance logs, permits, contractor files, insurance policies, incident reports, invoices, procurement records, complaints, meeting minutes and audit findings.

A reliable records system defines ownership, retention periods, version control, access rights, backup arrangements and disposal procedures. The objective is not to retain everything indefinitely. Excessive retention increases privacy, storage and discovery risks. Records should be retained for the period required by law, contract, limitation rules, insurance practice and legitimate business need.

Property operations increasingly process personal data through visitor logs, access cards, CCTV, tenant databases, contractor records, parking systems and smart-building sensors. Core data principles include purpose limitation, data minimisation, accuracy, security, controlled access, transparency and lawful retention. Managers should identify who determines the purpose of processing, who processes data on instructions, where data is stored and how individuals can exercise applicable rights.

Security controls should include role-based access, strong authentication, encryption where appropriate, audit logs, patching, supplier due diligence, incident response and tested backups. A building-management system connected to lifts, heating, access control or energy equipment is also a cyber-physical system. A cyber incident can therefore create physical safety consequences. Operational technology should be segmented, monitored and included in emergency planning.

Artificial intelligence can assist with anomaly detection, predictive maintenance, document classification and energy optimisation. However, outputs require human oversight. Poor data can produce unsafe maintenance priorities; opaque models can unfairly flag occupants; automated recommendations may conflict with legal duties or contractual commitments. Managers remain accountable for decisions made with technological assistance.

Governance: From Authority to Accountability

Governance is the system by which property decisions are directed, authorised, monitored and challenged. It is broader than management. Management executes activities; governance determines who may decide, under what information, with what controls and subject to whose review.

A sound governance framework normally includes a delegated authority schedule, approval thresholds, documented policies, segregation of duties, risk registers, reporting lines, escalation procedures, internal controls and periodic independent review. The board or asset owner should receive information that is sufficiently reliable and decision-useful, including material risks, overdue corrective actions, incidents, expenditure variances, conflicts and compliance exceptions.

Segregation of duties is particularly important in procurement and service-charge administration. The person who specifies a requirement should not normally be the only person who selects the supplier, approves the invoice and confirms performance. Where staffing makes complete separation impractical, compensating controls such as secondary approval, rotation, transaction sampling and independent review should be used.

Transparency does not mean disclosing confidential information indiscriminately. It means explaining decisions, criteria, material assumptions and accountability arrangements to legitimate stakeholders. A transparent procurement process records the requirement, evaluation criteria, bids or quotations, reasons for selection, approvals, contract terms and performance evidence. A transparent service-charge process distinguishes recoverable from non-recoverable costs and provides an understandable reconciliation.

Audits should be risk-based. Financial audits test transactions and controls; compliance audits examine legal and contractual obligations; technical audits assess asset condition and safety; environmental audits examine impacts and permits; data audits review access, retention and security. An audit is valuable only when findings are assigned to responsible persons, given deadlines and followed through to verified closure.

Ethics, Integrity and Conflicts of Interest

Law establishes minimum standards; ethics guides conduct where a decision is technically lawful but potentially unfair, deceptive or harmful. Property professionals manage scarce opportunities, significant budgets and relationships with suppliers, tenants, investors and public officials. These conditions create incentives for favouritism, concealed benefits, false reporting and misuse of confidential information.

A conflict of interest exists when a personal, financial, family or external interest could influence—or reasonably appear to influence—a professional decision. The conflict may be actual, potential or perceived. Disclosure is the first control, but disclosure alone may not be sufficient. Depending on severity, the person may be excluded from evaluation, required to obtain independent approval, transferred from the decision or prohibited from participating.

Corruption risks arise in tendering, planning approvals, inspections, leasing, redevelopment, maintenance variations, valuation instructions and claims. Effective anti-corruption controls include a code of conduct, gifts and hospitality rules, due diligence on intermediaries, competitive procurement, approval trails, whistleblowing channels, investigation procedures and protection against retaliation. Facilitation payments and unofficial commissions should be treated as high-risk conduct and handled according to applicable law and organisational policy.

Ethical decision-making can be structured through five questions: What are the facts? Who may be affected? What duties and rights apply? Which options are fair, proportionate and transparent? Could the decision be defended if disclosed to an affected party or regulator? This framework does not eliminate judgement, but it makes reasoning more disciplined.

An Integrated Compliance and Assurance Framework

A practical compliance framework can be organised into seven connected stages.

First, establish the compliance universe: identify laws, regulations, leases, licences, permits, title restrictions, policies, insurance conditions and voluntary standards relevant to the asset. Second, allocate obligations using a responsibility matrix that distinguishes owner, occupier, manager, employer, contractor and regulator. Third, assess risk by considering probability, consequence, vulnerability, detectability and existing controls. Fourth, implement controls through procedures, training, maintenance, procurement standards, emergency plans and data safeguards. Fifth, collect evidence in a controlled records system. Sixth, test performance through inspections, audits, drills, reconciliations and management reviews. Seventh, improve the system by correcting root causes, updating responsibilities and communicating lessons.

A useful risk register should identify the risk, source of obligation, affected stakeholders, inherent rating, controls, control owner, residual rating, action, due date and assurance method. It should not become a static list. Changes in occupancy, technology, legislation, climate exposure, financing, refurbishment or service providers should trigger review.

The “three lines” concept can clarify assurance. Operational teams own risks and operate controls. A risk, compliance or health-and-safety function supports and monitors those controls. Internal audit or an independent reviewer provides objective assurance. Smaller organisations may combine roles, but they should still preserve challenge and independence as far as practicable.

Applied Case: The Riverside Exchange Complex

Background

Riverside Exchange is an illustrative mixed-use complex containing offices, restaurants, a parking structure and retail units. The owner appoints a facilities-management company under a three-year contract. The building uses electronic access control, CCTV, a digital work-order platform and a building-management system. Several leases require tenants to contribute to common-area costs and comply with building rules.

Situation and problem

A tenant plans a refurbishment that will alter internal partitions and install commercial kitchen equipment. At the same time, a fire inspection identifies storage in a protected escape corridor. The facilities manager also discovers that the preferred maintenance contractor is partly owned by the manager’s sibling. Access-control records are retained indefinitely, and the owner’s quarterly report includes an energy-reduction claim based on estimated rather than metered savings. A minor water incident has occurred, but notification to the insurer has been delayed.

Analysis

The refurbishment may affect fire separation, ventilation, electrical capacity, waste, accessibility and permitted use. Approval should not be based solely on the tenant’s drawings; competent technical review and any required authority consent are necessary. The obstructed escape route presents an immediate life-safety issue and requires prompt correction, documentation and communication.

The contractor relationship is a conflict of interest. Even if the contractor is competent and competitively priced, the manager’s participation could undermine confidence in the decision. The access records raise data-governance questions concerning purpose, retention, access and security. The energy claim lacks a reliable measurement boundary and could mislead stakeholders. Delayed insurance notification may prejudice coverage and indicates a weakness in incident escalation.

Approach and solution

The owner establishes a temporary compliance committee including the asset manager, an independent fire consultant, the data-protection lead and a finance representative. The escape corridor is cleared immediately, photographed and entered into the corrective-action register. The tenant’s works are paused pending review of drawings, permits, fire strategy, contractor competence, insurance and a method statement.

The facilities manager discloses the family relationship and withdraws from specification, evaluation and approval. An independent procurement process is conducted, with documented criteria and approval. Access data are classified, retention periods are defined, unnecessary historical records are securely deleted, and administrator access is reviewed. The energy report is corrected to distinguish measured results from estimates and to state assumptions. The water incident is notified to the insurer and investigated for both physical cause and reporting failure.

Outcome

The refurbishment proceeds after design changes and additional controls. The tenant accepts responsibility for specified internal works while the owner retains responsibility for common systems and statutory coordination. The contractor is selected through an independent process. The complex introduces monthly compliance dashboards covering open safety actions, permit status, insurance notifications, data-access exceptions, energy measurement quality and procurement conflicts.

Learning points

The case demonstrates that compliance failures are interconnected. A building alteration creates safety, contractual, insurance and records obligations. A conflict of interest is a governance problem even without proven financial loss. Digital data require lifecycle management, not merely technical collection. Finally, accurate reporting is an ethical and control requirement: decision-makers cannot manage risk effectively when performance information is overstated.

Challenges, Limitations and Common Mistakes

Managers frequently rely on certificates without checking actual conditions; assume a contractor has absorbed all legal responsibility; treat lease summaries as substitutes for the signed documents; approve variations without confirming budget and authority; retain data without a defined purpose; confuse occupancy with ownership; or close audit findings without verifying implementation. Another common mistake is to measure compliance only by the absence of incidents. A lack of reported incidents may indicate weak reporting rather than safe performance.

Resource constraints create genuine trade-offs. Small organisations may not have separate compliance, audit and legal departments. The answer is proportionate control: prioritise high-consequence risks, use competent external advisers where necessary, document limitations and ensure that independent challenge exists for significant decisions. Compliance systems can also become excessively bureaucratic. The objective is not paperwork for its own sake but reliable control of material risk.

Current Developments and Best Practice

Climate-related physical risks are changing property due diligence, insurance pricing, continuity planning and capital expenditure. Flood, heat, wildfire, water scarcity and extreme storms may affect asset value and habitability. Managers increasingly combine condition data, climate information and scenario analysis when planning resilience investments.

Building information modelling, digital twins, sensors and predictive analytics can improve maintenance and energy management, but they expand cyber, privacy and vendor-dependence risks. Procurement should address data ownership, interoperability, system availability, cybersecurity responsibilities and exit arrangements. Sustainability and social-value expectations are also influencing investment decisions, tenant requirements and reporting, making evidence quality increasingly important.

Best practice is therefore characterised by: clear allocation of duties; current legal and asset registers; risk-based inspections; competent contractors; documented approvals; independent challenge; accurate and accessible records; proportionate privacy controls; prompt incident escalation; protected reporting channels; regular training; and leadership that rewards responsible disclosure rather than concealment. A mature organisation treats near misses and audit exceptions as sources of learning, not merely as threats to reputation.

Chapter Summary

Property and facility management operates within an integrated system of property rights, contracts, statutory duties, insurance arrangements, governance controls and ethical expectations. Ownership does not eliminate the obligations of occupiers, managers or contractors, and delegated authority must be clearly defined. Leases, easements, covenants and permits must be translated into operational responsibilities and evidence.

Compliance is continuous: organisations identify obligations, assess risks, implement controls, retain records, test performance and correct deficiencies. Building safety, accessibility, environmental protection, insurance, data governance and cyber-physical security require active oversight. Governance strengthens this system through accountability, segregation of duties, transparent procurement, risk-based auditing and independent assurance. Ethical practice requires disclosure and management of conflicts, resistance to corruption, protection of confidential information and truthful reporting. Digital tools and emerging climate risks increase both capability and responsibility. The central professional obligation is to make decisions that are lawful, evidence-based, transparent, proportionate and defensible to affected stakeholders.

Key Terms

Ownership: The legally recognised bundle of rights and duties associated with property.

Possession: Physical or legal control of property, which may exist without ownership.

Lease: An arrangement granting occupation and usually exclusive possession for a defined period.

Licence: Permission to use property that generally does not create the same proprietary interest as a lease.

Easement: A legal right to use another property for a specified purpose, such as access or drainage.

Covenant: A legally enforceable promise concerning the use, maintenance or treatment of property.

Compliance universe: The complete set of laws, contracts, permits, policies and standards applicable to an asset.

Delegated authority: Documented power given to a person or role to make specified decisions.

Risk register: A controlled record of risks, controls, owners, ratings and corrective actions.

Due diligence: Investigation undertaken before acquisition, leasing, investment or approval of a significant transaction.

Insurance deductible: The portion of an insured loss borne by the policyholder before insurance responds.

Business interruption: Loss of income or additional expense arising from interruption of operations, subject to policy terms.

Audit trail: Evidence showing how a transaction, decision or control activity was performed and approved.

Segregation of duties: Division of incompatible tasks among different people to reduce error or fraud.

Conflict of interest: A personal or external interest that could influence, or appear to influence, professional judgement.

Beneficial ownership: The individual or entity that ultimately benefits from or controls an interest, even if not the registered holder.

Data minimisation: Collection and retention of only the personal data necessary for a defined purpose.

Whistleblowing: Reporting suspected wrongdoing through an authorised channel, usually with protection against retaliation.

Three lines model: A governance approach separating operational control, oversight and independent assurance.

Digital twin: A digital representation of a physical asset or system used for monitoring, analysis or simulation.

Review Questions

Short Answer Questions

1. Distinguish ownership, possession and delegated operational control in property management.

2. What information should be included in a property compliance obligation matrix?

3. Why does an insurance certificate not by itself demonstrate effective risk management?

4. Explain the purpose of segregation of duties in property procurement.

5. Identify three principles relevant to the retention of access-control data.

Long Answer Questions

1. Explain how leases, easements, covenants and statutory controls together shape the responsibilities of a facility manager.

2. Discuss a risk-based framework for managing building, fire, health, safety and environmental compliance.

3. Evaluate the relationship between governance, transparency, audit and accountability in service-charge administration.

4. Examine ethical risks in contractor procurement and propose controls for conflicts of interest and corruption.

5. Discuss the opportunities and risks created by sensors, building-management systems, predictive analytics and artificial intelligence in property operations.

Analytical / Application Questions

1. A tenant proposes a major alteration but provides only architectural drawings and a contractor quotation. Analyse the approvals, legal checks, risk controls, insurance issues and records required before work begins.

2. A facilities manager discovers that a close relative owns a supplier whose bid is the lowest. What should the manager and organisation do? Justify your answer using governance and ethical principles.

3. An owner claims that energy consumption has fallen by 20 per cent, but the figure is based on estimates and incomplete records. Assess the professional, governance and reporting implications and recommend a corrective approach.

22. Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes ownership from delegated operational control?

A. A manager with operational control automatically owns the property.

B. Ownership is a legal interest, while operational control is authority exercised under a mandate.

C. Operational control always overrides lease and statutory obligations.

D. Ownership applies only to land and never to buildings.

Correct Answer: B. Ownership is a legal interest, while operational control is authority exercised under a mandate.

Question 2

A tenant plans to install commercial kitchen equipment during a refurbishment. What is the most appropriate first management response?

A. Approve the work because the tenant bears all responsibility.

B. Reject the work automatically because alterations are never permitted.

C. Review permitted use, technical effects, approvals, safety, insurance and contractor competence.

D. Allow work to begin and request documents after completion.

Correct Answer: C. Review permitted use, technical effects, approvals, safety, insurance and contractor competence.

Question 3

Why is a certificate alone insufficient evidence of continuing building compliance?

A. Certificates are never legally relevant.

B. Actual building use and conditions may change after certification.

C. Certificates apply only to financial matters.

D. Compliance can be assessed only through tenant surveys.

Correct Answer: B. Actual building use and conditions may change after certification.

Question 4

Which control most directly addresses a conflict of interest in supplier selection?

A. Allowing the interested manager to approve the contract alone.

B. Keeping the relationship confidential to avoid delay.

C. Disclosure and withdrawal from specification, evaluation and approval.

D. Selecting the supplier without recording the decision.

Correct Answer: C. Disclosure and withdrawal from specification, evaluation and approval.

Question 5

What is the main purpose of a property compliance obligation matrix?

A. To replace all lease and title documents.

B. To identify duties, responsible parties, evidence and escalation requirements.

C. To calculate property market value.

D. To eliminate the need for inspections.

Correct Answer: B. To identify duties, responsible parties, evidence and escalation requirements.

Question 6

Which practice best reflects data minimisation?

A. Retaining all access records indefinitely in case they become useful.

B. Collecting and retaining only data necessary for a defined legitimate purpose.

C. Giving every contractor unrestricted access to building data.

D. Using personal data for new purposes without review.

Correct Answer: B. Collecting and retaining only data necessary for a defined legitimate purpose.

Question 7

A contractor is appointed for maintenance work. Which arrangement best reflects sound governance?

A. The contractor selects itself, approves its invoices and verifies its own performance.

B. The manager avoids documenting the appointment to preserve flexibility.

C. Requirements, evaluation, approval and performance verification are appropriately separated.

D. Price is the only selection criterion.

Correct Answer: C. Requirements, evaluation, approval and performance verification are appropriately separated.

Question 8

What is the proper role of insurance in property risk management?

A. It eliminates the need for preventive controls.

B. It transfers every possible loss regardless of policy wording.

C. It transfers specified financial risks while prevention and compliance remain necessary.

D. It guarantees payment whenever an incident occurs.

Correct Answer: C. It transfers specified financial risks while prevention and compliance remain necessary.

Question 9

Why should an energy-reduction claim distinguish measured results from estimates?

A. Estimates are always illegal.

B. Transparent assumptions are necessary for reliable reporting and informed decisions.

C. Measured data cannot be used in property management.

D. Energy claims are unrelated to governance.

Correct Answer: B. Transparent assumptions are necessary for reliable reporting and informed decisions.

Question 10

In the three-lines approach, who normally owns and operates day-to-day risk controls?

A. Operational teams and managers.

B. Only external auditors.

C. The insurance company.

D. The regulator in every case.

Correct Answer: A. Operational teams and managers.