Process RCM
6
Process risk control matrix For a full description of this kind of risk-control matrix refer to the web page "Matrix Mapping: the easiest and best way to map internal controls" at www.internalcontrolsdesign.co.uk/matrices. In this template there are three distinct groups of controls: those already in place, those agreed but not yet operating (i.e. in development), and those proposed but not yet agreed on. After each set of controls there are revised summaries of the level of control provided. Several columns are provided for capturing information about controls and you use, ignore, or add to them as you wish. The set of control objectives can also be changed, and you can even add extra ones if you like. inherent risk involved with each step and each control objective. Then add more summary formulae to study how the risk levels stack up to the control levels.
-
Upload
vivekan-kumar -
Category
Documents
-
view
212 -
download
0
description
Process RCM
Transcript of Process RCM
Process risk control matrix
For a full description of this kind of risk-control matrix refer to the web page "Matrix Mapping: the easiest and best way to map internal controls" at www.internalcontrolsdesign.co.uk/matrices.
In this template there are three distinct groups of controls: those already in place, those agreed but not yet operating (i.e. in development), and those proposed but not yet agreed on.
After each set of controls there are revised summaries of the level of control provided.
Several columns are provided for capturing information about controls and you use, ignore, or add to them as you wish.
The set of control objectives can also be changed, and you can even add extra ones if you like.
Another refinement you could add is to insert an assessment of the inherent risk involved with each step and each control objective. Then add more summary formulae to study how the risk levels stack up to the control levels.
Sort Control group Control Control ID Ref to detail
CONTROLS CURRENTLY IN PLACE1 Monitoring Business monitoring report: debtors m12 Monitoring Process monitoring report: process stats m2
etc etc etc
Summary scores CAVU
CONTROLS IN DEVELOPMENT1 Monitoring Business monitoring report: debtors m12 Monitoring Process monitoring report: process stats m2
etc etc etc
Summary scores CAVU
CONTROLS PROPOSED1 Monitoring Business monitoring report: debtors m12 Monitoring Process monitoring report: process stats m2
etc etc etc
Summary scores CAVU
A3
Use this to reorder the controls by sorting.
B3
Categorise controls in a helpful scheme
C3
Name or description of control.
D3
Uniquely identify each control.
E3
Reference or hyperlink to supplementary documentation about the control, if any.
xxxx
Frequency SamplingOwner - operational
Owner - development
To do date
Performance evidence
Perform-ance rating
F3
Operational owner i.e. person taking care of operating the control once it is in place
G3
Development owner i.e. person taking care of putting the control in place
H3
How often the control is to be executed
I3
What samples the control is to be applied to - usually controls apply to ALL items
J3
Date by which the control is to be in place
K3
Evidence of the performance of the control e.g. statistics, audit comments
L3
A summary rating of how well the control is performing
Objectives Process steps
Operation cost C A V U Step A Step B Step C Step D Step E
1 0 1 1 1 1 11 1 0 1 1 1 1
Summary scores 1 C 0 0 0 0 02 A 0 0 0 0 03 V 0 0 0 0 04 U 0 0 0 0 0
1 1 1 1 1 11 1 1 1 1 1 1
Summary scores C 0 0 0 0 0A 0 0 0 0 0V 0 0 0 0 0U 0 0 0 0 0
1 1 1 1 1 11 1 1 1 1 1 1
Summary scores C 0 0 0 0 0A 0 0 0 0 0V 0 0 0 0 0U 0 0 0 0 0
Development cost
O2
Control objectives
M3
Information about how much it costs to operate the control
N3
Information about how much it will cost to put the control in place initially
O3
Completeness: all items at the previous stage of the process are processed
P3
Accuracy: all items processed are processed accurately
Q3
Validity: all items processed existed at the previous stage in the process
R3
Uniqueness: all items are processed just once
P11
These show the control provided by the controls currently in place
P27
These show the control provided by the controls in place and in development
P41
These show the control provided by all the controls above
Process steps
Step F Step G
11
0 00 00 00 0
11
0 00 00 00 0
11
0 00 00 00 0
S2
The process divided rigorously into steps e.g. based on information processing steps
