The survey or questionnaire approach is often used if the desired respondents are too numerous or widely dispersed to be readily brought together for a workshop. This includes its relevant policies, plans, laws, regulations and contracts, organizational information, financial information, previous audit results, industry best practices, details of problems affecting the area and, where possible, details of challenges and opportunities expected to arise in the future. An internal (or external) auditor who is familiar with the processes, activities, risks, controls of the entity usually facilitates the RCSA workshops. Use it as a mechanism to assess informal, or soft, controls as well as traditional hard controls. The facilitated self-assessment approach involves gathering management and staff for workshops relating to, and discussion of, specific issues or processes. Organizations can combine more than one approach. The primary forms of RCSA are facilitated workshops and structured questionnaires or surveys. Ensure that the identification, recognition and evaluation of business objectives and risks are consistent across all levels of the organization.Assess and manage high risk areas of business processes.Identify and prioritize their business objectives. It provides a framework and tools for management and employees to: The aim of RCSA is to integrate risk management practices and culture into the way staff undertake their jobs, and business units achieve their objectives. It adds value by increasing an operating unit’s involvement in designing and maintaining control and risk systems, identifying risk exposures and determining corrective action. RCSA (Risk Control Self Assessment) is an empowering method/process by which management and staff of all levels collectively identify and evaluate risks and associated controls.
0 Comments
Leave a Reply. |