Proactive Risk and Control Management to create compliance!
Internal as well as external factors, such as EU guidelines, require the application of a clear and effective internal controlling system (ICS) from companies in all sectors.
Existing internal controls can have very different levels of maturity. Either no documentation exists or the controls are simply insufficiently documented. Or there are controls which do not target the risk profile of the company which can lead to a case of “over control”.
We support you through the application of best practices and approved frameworks like COSO II (Committee of Sponsoring Organisations of the Treadway Commission) to develop and continually improve an integrated ICS. Our action model does not only refer to the development of the ICS, but guarantees a continuous examination and improvement of the whole system. We pay particular attention to the effective and efficient design and operating effectiveness of your internal controlling and risk management system.
 Introduction of Process Governance Process Governance is more than a keyword: transparent and clearly defined processes are a part of the organisational culture which should be demanded when establishing a governance framework. In particular risk management and an ICS are not limited to the pure definition of processes. We support you to carry out the necessary organisational changes and we establish the essential management system together with you.
| 
|  Development of the ICS based on Best Practices The target oriented development of internal controlling systems relies on elements of the frameworks like COSO II. We support you with the application of these theories with best practices to guarantee an efficient design of the system.
|
 Risk Analysis & Risk Portfolio Production A critical step within the scope of risk analysis is the definition of the analysis area, for instance, retrograde profit and loss or balance analysis. We support you with suitable methods and sector specific risk catalogues of process analyses and assessment of risks. The creation of the risk portfolio occurs on the basis of the defined risk profile of the company and details the relevant risks which must be actively considered.
| |  Embedding Continuous Controlling Processes Establishing continuous controlling processes stimulates the permanent realisation of control measures in the organisation. On the basis of risk analysis and risk portfolios, suitable controls or controlling processes are defined. A comparison of risk profiles (“test of design”) can be carried out, a proof concept of controls can be documented, and the basis for walkthroughs and audits can be established with the use of analysis and reports.
|
 Target Oriented Report & Proof of Compliance In general activities in the area of Governance, Risk Management, and Compliance, have demand for extensive report requirements for different interest groups. We support you to ensure that you meet the requirements of the different target groups like the examination board, division manager, internal revision, external public accountants etc.
| |  Monitoring Audits and ongoing evaluations guarantee the realisation of the control measurements and the continuous effectiveness of their development and realisation (design and operating effectiveness). The monitoring and the ongoing evaluation and improvement are an inherent part of our action model in this service area. We ensure that you gain access to the line organisation, report paths, and measurement management.
|
 Construction & Introduction of ICS & Risk Management Portals ICS and Risk Management generally involve different roles of the department, from risk experts and risk managers to the auditors and public accountants. Each of these roles have different functions, targets, and expectations. To satisfy every role and their needs and requirements, web-based portals offer an ideal platform with specific content which is needed by the different ICS & Risk Management roles. We support you with concepts, development, and introduction of ICS & Risk Management portals which provide intuitive, role specific web access for the people involved. We also offer compliance briefs, reporting, and monitoring.
| | |