13.07.2015 Views

IIA ASD research report - The Institute of Internal Auditors

IIA ASD research report - The Institute of Internal Auditors

IIA ASD research report - The Institute of Internal Auditors

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

isksΧ focus on the mission as a reference point for changeΧ seek advice from clients/stakeholders in the change processΧ involve all members <strong>of</strong> the organization in order to benefit from their experienceand expertise in planning and implementing changeΧ be flexible and non-bureaucratic in considering alternative ways <strong>of</strong> organizingΧ be deliberate and patient, and manage expectations <strong>of</strong> all stakeholdersΧ understand that the move to SOA status can represent a significant cultural change,and that it will take time to fully implement and adaptC.Partnerships Controls:Some good controls to mitigate the risks that are prevalent in this <strong>ASD</strong> option are asfollows:Χ good communication channels are essentialΧ nurturing the longer-term relationship will bring stabilityΧ willingness to develop customized arrangementsΧ good organization, clear objectives and committed partners are keyΧ encourage synergies among its stakeholdersΧ planning and decision-making process needs to be open and flexibleΧ feedback from clients guides partners in the right directionΧ clear specification <strong>of</strong> roles and responsibilities from the startΧ inclusive and comprehensive accountability framework, decision-making processand <strong>report</strong>ing mechanism need to be in placeΧ must have a clear identification <strong>of</strong> the problems with the current delivery programsbefore seeking <strong>ASD</strong> to prevent risk <strong>of</strong> incorrect decisions.III. Review ProceduresA.General1.Checklist:If no measures are applied to deal with risk, then there are some questions that arenecessary to be asked in the risk management pr<strong>of</strong>ile. <strong>The</strong> five key questions toconsider are:1.Have senior managers communicated the core values <strong>of</strong> the business in a way that peopleunderstand and embrace?æ

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!