Database Reference
In-Depth Information
Survey and interview management
InFission Compliance PMO facilitates management surveys and interviews to
determine the inherent risks based on management assessment on the impact
and likelihood of key events that can negatively impact InFission's business
model and assets. An anonymous annual management survey is initiated to
identify significant areas of risk. Managers are encouraged to provide opinions
and exchange information. The survey results are tabulated and evaluated by
risk managers to identify the top risks to the company. Next, the executive
management interviews are conducted to select the risk based on strategic
objectives and business performance targets.
The following figure depicts the survey and interview process:
Proposed Risks
Management Survey
Risks based
on strategic
objectives
Executive
Interviews
Reviewing prior year documentation
A key step in management assessment is to verify the risk and control
documentation for the prior year. This process includes input from process
owners regarding process documentation in their respective areas. In addition,
it includes the selection of significant accounts, control locations, key business
processes, mission critical IT applications, and ultimately the enterprise control
verification plan. The following documents are reviewed in the process:
Search WWH ::
Custom Search