The important point is that the audit committee should have some reasonably independent assessment of management’s report. Audit committee members could use these reports to set the audit plan for the next year, to track how risks have changed and are changing within the organization, and to facilitate discussion of which controls should be added.
Best practice 3: Adopt a framework for assessing operational risk Over the past few years, the discussion of operational risk management has increased significantly in banking circles.