Organisations without risk management are vulnerable to unforeseen occurrences and threats, which can cause financial losses, reputation harm, regulatory non-compliance, and operational interruptions. Our unpreparedness can impair strategic goals, damage stakeholder trust, and threaten the organisation’s long-term success.

The risk and control matrix (RACM) help an organisation identify, rank and implement control measures to manage key risks.  Internal Auditors use a RACM to develop audit plans focussing on key risk areas. RACM provides a structured approach to assess whether risks to the achievement of objectives in an audit area are properly addressed.

The RACM is used in audits to assess the effectiveness of internal controls and identify potential risks. It helps auditors evaluate control effectiveness, prioritise audit efforts, and support independent assurance.  The RACM enhances the audit process by making it more systematic and focused, helping auditors identify and address potential issues efficiently.

This course is designed to deliver following outcomes:

Understand what is a Risk and Control Matrix?

Why is RACM important and the benefits of using a RACM?

How does the RACM contribute to an organisation’s GRC efforts?

What are the key components of a RACM?

Learn the differences between Audit Work Plan versus Risk and Control Matrix in auditing

Learn to undertake focussed audits focussing on key risk areas based on RACM

Learn about best practices for documenting and maintaining RACMs

Learn to develop a RACM

Discuss case studies

Obtain access to useful tools, templates, insights and other resources.

Knowledge Level: Intermediate

CPE Hours: 4

Delivery Format: Facilitator-led training via Zoom (Note: This training program will be delivered online using Zoom. Registrations will be strictly limited to 20 participants to allow maximum interaction in the online environment.)

For Funds Transfer payments: Download the funds transfer registration form here and email the completed form to [email protected]