The Elsmar Cove Business Standards Discussion Forums More Free Files Forum Discussion Thread Post Attachments Listing Elsmar Cove Discussion Forums Main Page
Welcome to what was The Original Cayman Cove Forums!
This thread is carried over and continued in the Current Elsmar Cove Forums

Search the Elsmar Cove!

Wooden Line
This is a "Frozen" Legacy Forum.
Most links on this page do NOT work.
Discussions since 2001 are HERE

Owl Line
The New Elsmar Cove Forums   The New Elsmar Cove Forums
  Risk Based Audits

Post New Topic  Post A Reply
profile | register | preferences | faq | search

UBBFriend: Email This Page to Someone! next newest topic | next oldest topic
Author Topic:   Risk Based Audits
eric abbott
Lurker (<10 Posts)

Posts: 5
Registered: Jan 2001

posted 16 January 2001 07:10 AM     Click Here to See the Profile for eric abbott   Click Here to Email eric abbott     Edit/Delete Message   Reply w/Quote
Does anyone have experience of Risk based auditing i.e. focussing on those areas of identified risk rather than on those which, if non-compliant would have no significant impact on the process.


IP: Logged

Forum Contributor

Posts: 24
From:La Mesa, CA, USA
Registered: May 99

posted 16 January 2001 08:03 PM     Click Here to See the Profile for stefanson   Click Here to Email stefanson     Edit/Delete Message   Reply w/Quote
Hi Eric,

I have evaluated organizations for risk of delivering nonconforming products and violating regulatory requirements. I call them Risk Assessment Audits or Risk Analyses or Risk Reduction System Evaluations. Should allegations of product liability or regulatory compliance be raised, organizations need to have systems, practices and records in place to send the investigators elsewhere.

What would you like to know?

IP: Logged

Marc Smith
Cheech Wizard

Posts: 4119
From:West Chester, OH, USA

posted 16 January 2001 08:15 PM     Click Here to See the Profile for Marc Smith   Click Here to Email Marc Smith     Edit/Delete Message   Reply w/Quote
I'd like to hear whatever you have to say about format, what things are you looking at, how do you assign risk values, etc.

IP: Logged

Greg Mack
Forum Contributor

Posts: 37
From:Sydney, NSW, Australia
Registered: Feb 2001

posted 28 February 2001 05:17 AM     Click Here to See the Profile for Greg Mack   Click Here to Email Greg Mack     Edit/Delete Message   Reply w/Quote
Hi Eric,

I have used a risk based assessment for our internal audit schedule. As we have a National system (across Australia) involving five business units, I have asked each Department Manager in all businesses to assess each procedure based on risk to the business.

A rating of "1" is considered a high risk, "2" is considered a medium risk, and "3" a low one. These are then scheduled to be audited six monthly, annually and biennially respectively.

This was a good and easy approach which has worked well for us and also impressed our third party auditors. It is an easy approach to compiling an audit schedule based on risk.

Recently (last week) I re-issued our schedule and changed it somewhat. I have made the schedule more of a "real-time" schedule rather than an excessive planned approach, and also cut back dramatically on the base schedule.

Now we have our category "1's" which are audited by an internal Corporate Team annually. Category "2's" are scheduled once every two years, and category "3's" are considered optional based on need as they are not considered a risk to the day-to-day operation of the business.

The intent is that the trends identified in the Corrective/Preventive Action system are added to the audit schedule on a progressive basis. So this then reflects the current "real-time risks" of the business rather than trying to plan risks over two years based on gut-feel.

Of course, should the business wish to audit areas at a higher rate than the base schedule then that is up to each respective business.

This approach seems to be good on paper so far, and time will tell how effective it is. I am banking on it being a winner though.

Hope this insight helps.

IP: Logged

All times are Eastern Standard Time (USA)

next newest topic | next oldest topic

Administrative Options: Close Topic | Archive/Move | Delete Topic
Post New Topic  Post A Reply Hop to:

Contact Us | The Elsmar Cove Home Page

Your Input Into These Forums Is Appreciated! Thanks!

Main Site Search
Y'All Come Back Now, Ya Hear?
Powered by FreeBSD!Made With A Mac!Powered by Apache!