Session Practice Sharing RM Assurance.pptx

Auditing risk management

1. ISO31000 series Auditing/Assessing The Risk Management Based on ISO31000 Practice Sharing on Assuring/Auditing the Risk Management Process

2. List of Contents Assurance on Risk Management Process Environment Types What Independent Assurance Provider Should Do in Planning What Independent Assurance Provider Should Be Aware During Engagement What Independent Assurance Provider Should Be Clear About In Reporting DOs & DON’Ts for Independent Assurance Provider 1

3. Assurance on Risk Management Process 2 Gap Analysis Maturity Assessment Audit Compare current RM practices to a best practice reference Evaluate current RM practices as part of management system Verify the effectiveness of current RM practices Close the gap Increase maturity level Confidence level on objective achievement WHAT IS IT WHAT TO DO WHAT TO SEEK

4. Environment Types 3 Automated operations Project-based processes Enterprise-wide Project team Head office Remote area Early stage of RM Fully ERM

5. What Independent Assurance Provider Should Do in Planning 4

6. What Independent Assurance Provider Should Do in Planning 5

7. What Independent Assurance Provider Should Do in Planning 6 Create values and protects value Is an Integral part or organizational processes Part of decision making Explicitly addresses uncertainty Is systematic , structured and timely Is based on the best available information Is tailored Takes human and cultural factors into account Is transparent and inclusive Is dynamic, iterative and responsive to change Facilities continual improvement and enhancement of the organization

8. What Independent Assurance Provider Should Be Aware During Engagement 7

9. What Independent Assurance Provider Should Be Clear About In Reporting 8

10. DOs & DON’Ts for Independent Assurance Provider DOs DON’Ts Prepare yourself before engagement... Not only depend on historical experiences... Be independent and objective... Not foredeeming... Keep up yourself to changes.. Not just staying the same.. Quick-win action plan.. Not comprehensive yet exhausted long-term plan 9

11. QUESTION ? 10