Auditing the Risk Management Process

INDEX

A

Accountability, 209

Adding value, 92

Adequate control, 100

Advice, 152

Assignment plan, 166–167

Assurance services, 34, 58, 149–150, 154–155

Audit approach, 141–175

Audit committee, 120, 146–148

Audit objectivity, 61

Australian/New Zealand Risk Standard, 11, 12, 14, 20, 22, 25, 29, 58, 65, 131, 156, 183, 194

Authorization levels, 108–110

Awareness, 123

B

BASEL, 9, 13

Blame, 99

Board ERM policy, 145

Board risk policy, 119

Business performance process, 6, 208–209

Business service process, 208

Business systems, 92

C

CalPERS, 9

Capability, 15

Capacity and coordination, 75

Categories, 216

CEO and the board, 8

CEO, 51–52, 177

Certification, 220

Challenge, 17, 56

Change, 131

Charter, 38, 148–150

Choice, 16

Coaching and advice, 60

Commitment, 15

Communication, 17, 74, 127, 171, 222

Competence, 216

Conformance, 92

Consistency, 16

Consulting services, 35, 57, 151

Context, 16

Contingencies, 217

Continual integration, 29

Control environment, 126

Control monitoring, 111–112

Controls, 18, 102

Coordination and leadership, 41

Corporate objectives, 7

Corporate risk assessment, 119–120

Corporate strategy, 72

COSO ERM, defined, 4

COSO ERM components, 78, 93–94

Criticality, 101

CRO, 52–53, 62, 213, 214

CRSA, 117–140, 162–163

Culture, 19, 215

D

Decision making, 209, 211

Diagnostic tool, 225–264

Disclosures, 25

Documentation, 86–87, 182–184

E

Earnings, 186–187

Engagement observations, 172

Enron, 181

Enterprise risk management:

activities, 26

comparison with CRSA, 118

definition, 69

evolution ...