BOD Prep Sheet
BOD Prep Sheet
BOD Prep Sheet
Observation 1
IT Risk (People Risk)
Risk Description
Admin Assistant is currently responsible for data backup of CCTV records but there is lack of who
is responsible for monitoring thereby expose our branches to risk of effective prevention and
monitoring of branches external and internal threats.
Risk Approach
Risk Officer talked with Head of Admin and IT to understand the CCTV process and who is
responsible to do what activities.
Potential Outcomes
Recent incident at Kyone Pyaw branch of cashier suspecting behaviors at vault room and lack of
evidence of CCTV record is an example of the failure of our ineffective CCCTV process and
individuals involved in CCTV monitoring process.
Observation 2
Administration Risk (Process Risk)
Risk Description
Head of Admin do not have systematic data recording of each branch’s cost to set up on excel file.
Risk Approach
Talked with Head of Admin.
Potential Outcomes
Because of lack of systematic data recording of expenses of procurement stuffs in excel file, it is
difficult for Risk Officer to do risk assessment of procurement expenses. Potential fraud risk is
possible in procurement process.
Risk Description
When Risk Officer asked Head of Admin about if he can show me the actual expenses and
estimated budgets for procurements and renovation of new and old branches expenses. He said
he do not have those data on excel spreadsheets.
Risk Approach
Talked with Procurement Committee and Head of Admin.
Potential Outcomes
Risk Officer is unable to do risk assessment on Admin Department because of lack of necessary
data support from Head of Admin on procurement for setup of branches’ expenses.
Observation 4
Administration Risk (Process Risk)
Risk Description
Head Office staffs have wrong attitude towards audit and risk department. They think that Audit
and Risk department are finding faults with them and not willing to comply and support when
asked by risk officer with necessary data.
Risk Approach
Talked with Procurement Committee and Head of Admin.
Potential Outcomes
Difficult to do risk assessment effectively on Admin Department because of difficulty of co-
operation with Head of Admin.
Risk Approach
Risk Officer talked with Admin and Finance Department persons.
Potential Outcomes
Since the lack of responsible person to take care of company asset and inventory after purchasing,
Potential fraud and loss of company asset is possible during branches’ renovation and setting up
of Branches such as furniture, computers, Office equipment and other expenses.