Process and risk mapping
We document the financial processes as they actually run and identify where misstatement or loss could occur. Controls designed against an idealised process rather than the real one tend not to survive contact with daily operations. Mapping what genuinely happens is what makes the resulting control design fit the business.
