Risk Audits
Introduction
Risk Audit is one of the key focus
areas of CRP’s Internal Audit and Consulting Services. Risk by
definition means any unforeseen event which can result in quantifiable
business loss due to stoppage of work, damage, fraud and theft or any
natural acts of nature. Thus, Risk Audit’s biggest challenge and success
is the ability to map each and every possible risk which any business
may face and quantify it with an economic value. Thus, Risk Audit is
based on a clear value proposition of criticality based on Business
Continuity Plan (BCP) hierarchy matrix.
CRP’s Risk Audit ensures adherence to Internal Control procedures and
processes as laid down by the company. The consultants work closely
with companies to develop internal control mechanisms based on risk for
each and every individual process. The experience of working in various
industry verticals gives the leverage of cross functional experience in
creating full proof Risk scenario for companies and also ensuring
regular audits.
The key steps to a Risk audit are aimed at identifying possible risk
areas and then creating checks and balances to ensure non-occurrence.
Some of the key areas are:
|
- Internal Checks and controls
- Process mapping and documentation
- Identification of risk and their quantum
- Recommend process tuning
|
- Assign ownership
- Over all branch performance indicator
- Colour tag for future action based on risk matrix
|
|
How Risk Audit is carried out?
Risk audit today has become an important area for ensuring smooth
running of business. Also, along with business risks, it addresses risks
that arise out of human failure, intentional fraud and breakdown of
processes. Thus, Risk Audit firstly involves a thorough understanding of
the business and risk exposure areas that can result in severe economic
loss. This exercise is carried out by a combination of human
understanding skills and high end technology tools. The success of a
Risk Audit is to ensure on a regular basis detection of new areas of
risk, assign percentage value to them and create corrective measures to
ensure business continuity. One of the key strengths of CRP
team’s approach is its repository of experience in internal audit and
accounting departments of companies; this gives the consultants an
immediate understanding of the processes and systems being followed by
any client. Also, a judicious mix of physical verification, past data
analysis and software tested process robustness check ensure that
clients get compelling value addition from such audits.
Advantages
Risk Audit is one of the oldest and most traditional ways of ensuring
compliance; it is sometimes felt that Internal Audit is a mirror of
Statutory Audit in terms of management reporting and controls.
One of the key advantages of Risk Audits is to ensure regulatory
compliances such as that of SEBI which requires compulsory Internal
Audits for companies with turnover over a certain amount. Also, Risk
Audits are being globally used by senior management and boards to ensure
legal protection in case of any untoward incident in the company.
While, no organization is risk free, Risk Audits are helping
corporations across the globe to minimize adverse possibilities.
Risk Audit is usually carried on a quarterly basis and its
regularity is itself a sign of risk management. It helps organizations
become more diligent in their business processes and create uniformity
of action across the corporation. Last but not the least, the most
important aspect of Risk Audits is that any exception found during such
audits can be corrected and streamlined, unlike a Statutory Audit,
where deference amounts to violation of the law and results in penal
action to the company and its executives.
|