Enterprise Risk Management, 2nd Edition

CHAPTER 9Creating a Risk-Aware Culture

 

BRIAN PHILBIN, CPA, CA

Assistant Commissioner of the Audit, Evaluation, and Risk Branch and Chief Audit Executive, Canada Revenue Agency

 

WENDY SASCHENBREKER-TANG

Director of the Enterprise Risk Management Division in the Audit, Evaluation, and Risk Branch, Canada Revenue Agency

 

HEBA AWAD

Senior Risk Management Analyst in the Enterprise Risk Management Division, Canada Revenue Agency

 

GOLAM KHAN

Senior Risk Management Analyst in the Enterprise Risk Management Division, Canada Revenue Agency

 

INTRODUCTION

The Canada Revenue Agency (CRA) is the tax and benefits administration of the Government of Canada and most provinces, and is considered a leader in risk management among the Federal Public Service of Canada and other national and international organizations.

The CRA administers over CAD $457 billion in tax revenue and CAD $34.8 billion in benefits to Canada's taxpayers and benefit recipients annually (CRA 2020). The organization has more than 44,000 employees across the country's 9 million km², servicing a population of 34 million people through multiple channels (online, phone, mail, and in person). As can be imagined in an organization as large, complex, and dispersed as the CRA, there are many opportunities for risk incidents to occur.

The CRA is well aware of these risks. As a public institution whose mandate is to administer tax and benefit programs to contribute to the ongoing economic and social well-being of Canadians, ...