Internal Audit Risk Assessments
In general, a risk assessment is the process used to identify risk factors that have the potential to negatively impact achievement of an organization’s goals or objectives. Beginning in April and continuing through July, Internal Audit will be working on two different risk assessments which assist us in planning and prioritizing the work of our department.
Two Risk Assessments?? Can’t there be just one?? We too wish there could just be one large risk assessment, unfortunately, the purpose, respondent groups, method of delivery and timing make this difficult and may cause added confusion or frustration. Details of each risk assessment are below:
Fraud Risk Assessment – To be completed by the Office of Internal Audit in April via a short Qualtrics survey to a wide group of employees at all levels. This assessment will gauge, among other things, the understanding of what fraud is, the level of fraud training provided and the understanding of how to report suspected fraud.
Annual Risk Assessment – To be completed by the Office of Internal Audit in June-July via a combination of interviews with senior leaders and managers, and other quantitative factors. This assessment will identify the enterprise risks that USA Health is facing and is a key component in the creation of the annual audit plan.