These are simple tools based on the collection of internal control data. They are built
for auditors by auditors and are of limited use in a comprehensive firm-wide operational
risk management process. They are largely checklist based but do have some
advantages:
Ω Good for interviewing business units
Ω Good for control self-assessment
The solutions are generally qualitative not quantitative in nature so do not satisfy
the requirement for capital allocation.
Hiç yorum yok:
Yorum Gönder