UTSouthwestern风险与内部控制.ppt

Effectively Controlling Risk
What is the purpose of this training? Why is it necessary? What is internal control? What are the components of internal control? Where can I learn more?
– What could go wrong? – What must go right? – What is the significance of our risks? – What is the likelihood of occurrence?
Internal Control Process
Internal Control Process
Perform Risk Assessment
A risk is ANYTHING that could jeopardize the achievement of a goal or objective. For each goal or objective, identify your risks. Be comprehensive, by considering external and internal factors.
Control activities should be proactive, value-added, and cost effective.
Internal Control Process
Implement Control Activities
Properly balancing risks and controls makes good business sense!
Internal Control Process
Establish Control Environment
The control environment is the control consciousness of an organization. The control environment includes the integrity and ethical values of its people, their competence, and the way they do business.
Internal Control Process
Elements of the Control Environment
Standards of Conduct Guide Regents’ Rules, Business Procedures Memorandums, etc. Department standards of conduct Human resources policies and procedures Department policies and procedures Conflicts of interest--disclosure forms Ethics Guide Honesty Zero tolerance
Effectively Controlling Risk
What is the purpose of this training?
Provide employees with the training and tools to evaluate internal control at the activity, process and department levels. Two tools available to achieve this goal are the:
In order to achieve the goals of providing the highest levels of medical education, biomedical research and patient care, UT Southwestern must have effective internal controls. There needs to be an appropriate balance between controls and risks is necessary to provide reasonable assurance that the medical center’s operations will be effective,efficient and in compliance with laws and regulations.
Perform Risk Assessment
Questions employees should consider: What business are you in? Who are your customers? What do they need and want? What does that say about what you are trying to accomplish? How will you know you have been successful?
regulations, policies, and procedures
Internal Control Process
Perform Risk Assessment
Components and Departments must define their goals and objectives in relation to their:
Internal Control Process
Perform Risk Assessment
For each identified risk, estimate the potential significance (cost, safety, institutional image) and likelihood of occurrence.
WEAK INTERNAL CONTROLS
Effectively Controlling Risk
What is internal control?
Internal control is a process, effected by UT
Southwestern’s governing board,
– Mission, – Operations, – Financial reporting, – Compliance, and – Significant activities or processes.
Then, they must identify and analyze potential risks by asking certain questions:
Focus on the major risks, and determine how those risks should be managed and minimized to acceptable levels.
Internal Control Process
Implement Control Activities
Risk and Control Self-Assessment Guideline
Risk Assessment and Control Activities Worksheet
Effectively Controlling Risk
Why is it necessary?
Highly publicized frauds at other public institutions have caused concerns among UT System and component administrators. What was determined to be the problem?
– Having written policies and procedures and limits to authority
Reconciliations
– Explanations of the difference between two sets of data AND taking corrective action
Risk assessment helps to form a basis for determining how to manage identified risks.
Internal Control Process
What is our risk?
With internal controls, RISK is . . . The possibility that the organization
Risks
Controls
Internal Control Process
Implement Control Activities
Examples of Control Activities at UT Southwestern:
Approvals, authorizations, and verifications
regulations.
Effectively Controlling Risk
Internal Control Process
5 Components Establish Control Environment Perform Risk Assessment Implement Control Activities Communicate Information Monitor Performance
Control activities are the policies and procedures that help ensure that actions identified as necessary to manage risks are carried out properly and in a timely manner.