Cynthia Nfor

Assistant Manager: Internal Audit and risk management at Nikilitha Consulting

• South Africa
• January 2012 to October 2012

The detailed scope of work is to develop Risk and Control Matrices (RACM’s) for mapped processes according to the documented Eskom RACM Standard and Guideline. The development of the Risk and Control Matrices will include the following:
· Document for each sub process, the risks and control objectives pertinent to the sub process;
· Rank the risk according to the RACM standard ( which is mapped to the Eskom Integrated Risk Management Risk criteria);
· Identify the controls that have been designed from the PCM process activity descriptions, and together with the process owner, identify required controls and controls that are inadequate to mitigate the risks;
· Assign the control criticality with due consideration to the risk ranking;
· Identify the appropriateness of the segregation of duties, access controls etc.;
· In the detailed design PCM (where applicable), identify the required automated controls and facilitate with the application systems analysts, what can be implemented through configuration, or those that require customization ( to be dealt with through RICEFW’s) and;
· Identification of the control evidence required.