Risk and Control Self-Assessment (RCSA)
Course Description
Risk and control self-assessment (RCSA) involves identifying, recording and assessing the risks that
an organisation may encounter, as well as the controls in place to contain them. It covers several steps, from identifying the risks to which an organisation or business may be exposed to escalating and taking follow-up action and identifying ongoing issues that affect risks. This course explains what an RCSA is and how to construct, use and report on it
Who is this training for?
You should complete this course if you are involved in a compliance or risk management function in your workplace
Course Outline
Module 1 : Defining Risk and Control Self-Assessment (RCSA)
• Objectives of RCSA
• Components used in an RCSA
• How the RCSA fits into the risk management framework
Module 2 : RCSA Inputs – Risks, Control, Scales
• Identifying and recording risks in a register
• What are risk controls?
• Recording controls and building a control library
• Developing control effectiveness scales
Module 3 : RCSA Processes
• Assessing risks
• Assessing the effectiveness of risk controls
• Approaches to self-assessing risk levels
Module 4 : RCSA Outputs – Reporting and Follow-up Process
• Reporting risks
• Notifying and escalating report information
• Using reports and taking action