Auditing the Risk Management Process

Until recently, traditional risk management methodology was viewed as a series of benchmarks to be reviewed, checked off, and filed away for the following year. This laid-back system left many loopholes for corruption. Reckless trading, against the backdrop of the cutthroat competition of the 1990s into 2000 and beyond, forced regulators to get tough. The advent of enterprise risk management has brought about a dramatic change in the philosophy of risk management, making back office checking teams an important corporate resource, with a new focus on identifying and evaluating significant exposures to risk. This new approach encourages all employees to play a role in improving risk management and control systems.

Auditing the Risk Management Process brings together the latest thinking and guidance on internal control and how it pertains to the audit function to help readers implement effective enterprise risk management throughout all facets of their organizations. The first book in the new Practical Auditor Series-cobranded with the Institute of Internal Auditors-Auditing the Risk Management Process deftly illustrates how the growing trend in enterprise risk management affects the responsibilities of both internal and external auditors.

Author K. H. Spencer Pickett provides a wealth of practical guidance and tools, including his personally developed risk maps and process models, to help auditors fully understand the overall audit framework and reporting process, while complying with the demand for a higher standard of risk transparency enforced by Sarbanes-Oxley.

Written primarily for internal auditors, Auditing the Risk Management Process is also a useful tool for external auditors, compliance teams, financial controllers, consultants, and others involved in reviewing governance, risk, and control systems, as well as executives, managers, and staff as they are increasingly being asked to review their systems of internal control and ensure that there is a robust risk management process in place in all types of organizations.

Don't let your organization be derailed by poorly managed risk. Discover the best risk management practices in Auditing the Risk Management Process.