There is a distinct connection between understanding business processes, controls and competence.  If your employees and management do not understand your business and the reason for certain processes and controls then they cannot take ownership of the processes and will not be responsible for what goes wrong.  Understanding comes with knowing the purpose of things as well as the underlining consequence of not complying with controls.

Controls should be in place to mitigate risks.  Once you have identified the risk it is possible to determine what controls should be implemented to prevent the risk event from occurring.  So first you have to be able to look at the objective of the process, what could go wrong and then implement measures to prevent things going wrong.

What are you trying to achieve? What could go wrong and what can you do to make it go right?  Get these aligned and you will achieve your objective.

Contact into@kbaudit.com for your business needs.