Risk and internal control
Identify what could go wrong, put proportionate controls in place and give management assurance it can rely on.
Controls that nobody understands end up bypassed, and risks that nobody owns end up as audit findings. These programs help institutions build risk management and internal control that fit their size and mission: clear owners, proportionate controls and reporting that tells management something useful. They are for risk and compliance officers, internal auditors, finance teams and the managers who own the processes.
Programs in this domain
- Risk and internal control
Building and using a risk map
Identify, assess and prioritise an institution’s risks with the people who own them, and keep the risk map alive.
Explore - Risk and internal control
Designing an internal control system
Build internal controls proportionate to the risks, documented clearly and owned by the managers who run the processes.
Explore - Risk and internal control
Preventing fraud and corruption risks
Recognise where fraud and corruption can occur in an institution’s processes, and put in place prevention and detection that work.
Explore - Risk and internal control
Business continuity planning
Keep essential services running through a disruption, with a continuity plan that has been tested and that people know.
Explore - Risk and internal control
Internal audit in practice
Plan and carry out internal audit assignments that focus on real risks and produce recommendations managers accept.
Explore