.

defined?

      <--- Score

      119. What is the context?

      <--- Score

      120. Has/have the customer(s) been identified?

      <--- Score

      121. How do you gather the stories?

      <--- Score

      122. Is Risk based internal auditing required?

      <--- Score

      123. Has a team charter been developed and communicated?

      <--- Score

      124. What was the context?

      <--- Score

      125. Are roles and responsibilities formally defined?

      <--- Score

      126. What are the boundaries of the scope? What is in bounds and what is not? What is the start point? What is the stop point?

      <--- Score

      127. What are the Roles and Responsibilities for each team member and its leadership? Where is this documented?

      <--- Score

      128. How can the value of Risk based internal auditing be defined?

      <--- Score

      129. What information do you gather?

      <--- Score

      130. What defines best in class?

      <--- Score

      131. What are the Risk based internal auditing use cases?

      <--- Score

      132. What are the compelling stakeholder reasons for embarking on Risk based internal auditing?

      <--- Score

      133. How do you build the right business case?

      <--- Score

      134. Does the scope remain the same?

      <--- Score

      135. Has a Risk based internal auditing requirement not been met?

      <--- Score

      Add up total points for this section: _____ = Total points for this section

      Divided by: ______ (number of statements answered) = ______ Average score for this section

      Transfer your score to the Risk based internal auditing Index at the beginning of the Self-Assessment.

      CRITERION #3: MEASURE:

      INTENT: Gather the correct data. Measure the current performance and evolution of the situation.

      In my belief, the answer to this question is clearly defined:

      5 Strongly Agree

      4 Agree

      3 Neutral

      2 Disagree

      1 Strongly Disagree

      1. What are your primary costs, revenues, assets?

      <--- Score

      2. What tests verify requirements?

      <--- Score

      3. How do you verify if Risk based internal auditing is built right?

      <--- Score

      4. Will Risk based internal auditing have an impact on current business continuity, disaster recovery processes and/or infrastructure?

      <--- Score

      5. How can you manage cost down?

      <--- Score

      6. Are you aware of what could cause a problem?

      <--- Score

      7. How do you aggregate measures across priorities?

      <--- Score

      8. How can you reduce costs?

      <--- Score

      9. What causes investor action?

      <--- Score

      10. What disadvantage does this cause for the user?

      <--- Score

      11. When should you bother with diagrams?

      <--- Score

      12. What are the strategic priorities for this year?

      <--- Score

      13. What does losing customers cost your organization?

      <--- Score

      14. What measurements are possible, practicable and meaningful?

      <--- Score

      15. How can you measure the performance?

      <--- Score

      16. Are actual costs in line with budgeted costs?

      <--- Score

      17. Are there competing Risk based internal auditing priorities?

      <--- Score

      18. What methods are feasible and acceptable to estimate the impact of reforms?

      <--- Score

      19. What are the costs and benefits?

      <--- Score

      20. How sensitive must the Risk based internal auditing strategy be to cost?

      <--- Score

      21. How are measurements made?

      <--- Score

      22. What are allowable costs?

      <--- Score

      23. Do the benefits outweigh the costs?

      <--- Score

      24. Are you taking your company in the direction of better and revenue or cheaper and cost?

      <--- Score

      25. Are missed Risk based internal auditing opportunities costing your organization money?

      <--- Score

      26. Where can you go to verify the info?

      <--- Score

      27. When are costs are incurred?

      <--- Score

      28. What is the total cost related to deploying Risk based internal auditing, including any consulting or professional services?

      <--- Score

      29. What measurements are being captured?

      <--- Score

      30. How will effects be measured?

      <--- Score

      31. Are supply costs steady or fluctuating?

      <--- Score

      32. What details are required of the Risk based internal auditing cost structure?

      <--- Score

      33. What are the current costs of the Risk based internal auditing process?

      <--- Score

      34. What harm might be caused?

      <--- Score

      35. Does the Risk based internal auditing task fit the client’s priorities?

      <--- Score

      36. How do you measure efficient delivery of Risk based internal auditing services?

      <--- Score

      37. Is the solution cost-effective?

      <---