My audit - Risk Assessment - Step 1 - PLM

NEEDSEXOGENOUS FACTORS

OBJECTIVES INPUTS PROCESSES OUTPUTS

OUTCOMES

IMPACTS

RESULTS

EconomyEfficiency

Effectiveness

My audit - Risk Assessment - Step 1 - Flowchart

My audit - Risk Assessment - Step 1 - List of Expected Key Controls

List of Expected Key Controls

Area Objective Activity Process

My audit - Risk Assessment - Step 2 - List of Identified Risks

CommentsArea Objective Activity Process

Description of Riskroot-cause+problem + impact Include in Risk

Analysis table Y-N

My audit - Risk Assessment - Step 3 - Risk Analysis table

The Risk MatrixImpact

Low Medium HighLowMediumHigh

Low Medium High

Overall risk evaluation:

The Risk Analysis Table

Impact H-M-L Expected controls Risk response

Lik

elih

oo

d

Risk can be ignored

Judgement based on characteristic of defined risk

Risk must be followed up by audit

Area Objective Activity

Process

Description of Riskroot-cause+problem + impact Likelihood

H-M-LRisk level

H-M-L

Residual Risk

H-M-L

My audit - Risk Assessment - Step 4 - PAQS table

Risk Audit Question

Area Objective Activity

Process

Residual Risk level

Relevance & Interest H-M-L

Feasibility Normal Difficult Not Feasible

Include in Scope Yes-

No