Corporate Governance, Internal Controls

  • Global Engineering PLC (PE-backed) €8b, 50kFTEs
    • MENA region €400m revenue, 2500 FTEs,
  • after years of limited scope, the requirement of Full Scope RCM (Internal controls system) had to be fulfilled for all 8 legal entities in the Region + regional HQ (MENA)

Middle East and North Africa – MENA:
UAE (Dubai, Abu Dhabi) SAUDI ARABIA, QATAR, KUWAIT EGYPT, BAHRAIN, JORDAN, TUNESIA

  • Poor corporate governance culture
  • non standardized and weak internal control systems
  • lack of control risk management:
    • documentation
    • testing
    • analysis
  • roject Complexity (8 entities)
  • Project parallel to significant transformation of the Regiona and SG&A optimization (Segregation of duty issues)
  • Lack of knowledge and understanding by both staff and management
  • Resistance to Change
  • Limited staff resources
  • Limited Time,
  • planning (incl. roadmap)
  • involvement of top management
  • dedicated team established
  • close communication with Global ICM (internal controls) department
  • weekly progress meetings
  • redefinition of the processes
  • building controls repository
  • controls consolidation and standardization
  • more reliance on automatic controls (IT controls)
  • risk identification and evaluation
  • promoting risk approach culture
  • audit procedures (sampling, sampling, testing, walk-through, documentation, investigation)
  • IT audit procedures (general IT controls)
  • internal controls (design, implementation, monitoring)
  • frameworks standards (PCAOB, COSO, COBIT)
  • SOX/RCM (Risk Controls Matrix): implementation, management, transition
  • business process: (assessment, streamlining, simplification, permanent monitoring)
  • process documentation (narratives, workflows, walkthroughs, testing): O2C, P2P, R2R, others
  • proper process planning
  • roadmaps preparation and execution
  • efficient resources allocation