Risk-Based Compliance Monitoring

Description

Compliance Monitoring is an essential tool in knowing that your controls are designed, and are operating, effectively.  Without this, you cannot evidence an appropriately managed risk-mitigation programme and you are missing one of the key obligations of the compliance function.  You shouldn’t need to monitor and test *everything* however, and the expected approach is to know where the risks are, both at an inherent and residual level, and to target your monitoring resource accordingly, ensuring appropriate coverage.  This session looks at how you go about creating and operating an effective monitoring programme, what testing you need to do, and how you might document that to evidence good practice.