Focus & Features
Using Business Process Mapping in Risk Assessment
"Before you hate something you should try to understand it." - Marthe Grimes, Dakota
And the same can be said in risk assessment. Before the auditor can raise gaps and recommendations, the auditor must ensure to have a deep understanding of the process under review. For some organizations, the way to do this is by making sure that part of the audit team are members with intensive experience in the operations. But this can be a challenge to a relatively young audit team where much reliance is placed on its ability to learn and understand the business fast.
Among the various management tools available for understanding business processes, Business Process Mapping (BPM) has been proven to be an effective tool for the auditor for its ease of use and its impact to risk assessment
Through BPM, the auditor will be able to systematically assess a process' effectiveness and efficiency in achieving a certain business goal as well as identifying gaps that expose the business to potential risks. The outputs of the BPM will form one of the key inputs in finally assessing whether or not an organization's current processes are adequate in managing their residual risk to an acceptable level. BPM will also tell the auditor which control processes are critical where they can focus on as they craft their audit program and perform their audit tests.
What You Will Learn
This virtual seminar will teach the participants the key concepts, terms, methodologies, and techniques that will enable them to be proficient in using BPM in risk assessments.
I. Introduction to Business Process Mapping
II. Review of the Risk Assessment Process
III. ERM and Business Process Mapping
IV. Process Identification
V. Information Gathering
VI. Interviewing & Map Generation
VII. The Responsibility Assignment Matrix (RACI Matrix)
VIII. Business Process Risk and Controls Analysis
IX. Tips & Traps in generating a business process map
Who Should Attend
The seminar is ideal for junior auditors.
Number of CPE units: 3
Privacy Notice: We collect your personal information to register you in our training/ membership events and photos/videos will be taken for evidentiary purposes in relation to IIAP Seminars. We will use this information to provide services regarding your attendance and if you agree, to send you marketing information.
By giving us your personal information you consent to our use of it for the purposes described in this Privacy Notice.