Glossary of Performance & Risk Management terms
Search
Submit an entry
This form does not yet contain any fields.
    Join our Linkedin Group

    Join our mailing list
    This form does not yet contain any fields.
      Powered by Squarespace

      Saturday
      Dec062008

      Application Controls

      Programmed procedures in application software, and related manual procedures, designed to help ensure the completeness and accuracy of information processing. Examples include computerized edit checks of input data, numerical sequence checks, and manual procedures to follow up on items listed in exception reports.

      Source : COSO Integrated Internal Controls Framework, COSO Integrated Risk Management Framework

       

      Saturday
      Dec062008

      Balanced Scorecard

      A performance measurement tool, focusing on an organisation’s activities in terms of its vision and strategies, to give a comprehensive view of the performance. The key new element is focusing not only on financial outcomes but also on the non-financial measures that drive those outcomes.

      Source : Henley MBA Dissertation – At the Intersection

      Saturday
      Dec062008

      Basel II

      A capital adequacy framework applicable to Financial Services industry, covering areas such as Credit, Market and Operational Risk and how capital should be allocated to cover each of these areas.

      Source : Henley MBA Dissertation At the Intersection

      Saturday
      Dec062008

      Board

      Organisation's governing body. This includes a board of directors, head of a legislative body or agency, supervisory board, or the board of trustees or governors of a not-for-profit organisation.

      Source : BS31100:2008

      Saturday
      Dec062008

      Business Continuity management (BCM)

      Holistic management process that identifies potential threats to an organisation and the impacts to business operations that those threats, if realized might cause, and which provides a framework for building organizational resilience with the capability for an effective response that safeguards the interests of its key stakeholders, reputation, brand and value-creating activities.

      Source : BS31100:2008 [BS25999, modified]

      Saturday
      Dec062008

      Category

      One of three groupings of objectives of internal control, control activities or controls. The categories are effectiveness and efficiency of operations, reliability of financial reporting, and compliance with applicable laws and regulations. The categories overlap, so that a particular objective, for example, might fall into more than one category.

      Source : COSO Integrated Internal Controls Framework

      Saturday
      Dec062008

      Compliance

      Used with “objectives”: having to do with conforming with laws and regulations applicable to an entity.

      Source : COSO Integrated Risk Management Framework

      Saturday
      Dec062008

      Component

      One of five elements of internal control. The internal control components are the control environment, risk assessment, control activities, information and communication, and monitoring.

      Source : COSO Integrated Internal Controls Framework

      There are eight enterprise risk management components: the entity’s internal environment, objective setting, event identification, risk assessment, risk response, control activities, information and communication, and monitoring.

      Source : COSO Integrated Risk Management Framework

      Saturday
      Dec062008

      Computer Controls

      (1) Controls performed by computer, i.e., controls programmed into computer software (contrast with Manual Controls). (2) Controls over computer processing of information, consisting of general controls and application controls (both programmed and manual).

      Source : COSO Integrated Internal Controls Framework

      Saturday
      Dec062008

      Consequence

      Outcome of an incident that will have an effect on an organisation's objectives.

      Source : BS31100

      Note 1: There can be a range of consequences from one incident.
      Note 2: A consequence can be certain or uncertain and can have positive or negative impact on objectives.