La mise en place d'un programme de contrôle interne (matrice risques et contrôles) et d'un reporting (KPI/KRI) portant sur les processus du global shared operations de BPost

Abstract

My master in management sciences in financial analysis and audit in HEC Management School includes a final project thesis which takes place during the last year. I was hired by bpost, which is the Belgian post group to work on an internal project of the Global Shared Operations a new unit created in April 2016; the project was initiated more precisely in the Compliance & Performance department, where I made my internship. The aim of my project thesis is firstly to build an internal control system with a new risks and controls matrix replacing the old matrix SIC made by Deloitte which was qualified complex and hard to work with; and secondly to build the basis of an operational reporting, and a comparative analysis with Proximus on risk management approaches. In order to establish this internal control system I used as a tool the Process Risk Management, which is a corporate structured approach that manage important strategic & operational risks, aligning bpost risk appetite and ensuring consistent application. During my training, I had first to grasp the activities of each process and understand its flows, then I organized meetings and workshops with key people impacted by the two processes studied to introduce the PRM exercise, its objectives and its way of working and to identify risk and controls, everyone had to be aligned and work in groups and challenge each other. I came to deliver the two new matrixes with risks evaluated according to defined criteria’s, key controls determined and action plans validated to mitigate high impact residual risks and unconverted ones. Guidelines, roles and responsibilities were defined to make sure of implementing the monitoring of key controls and to identify key risk indicators for both processes. The project was delivered on time, and matched the customer’s requirements. In addition to the technical benefits, I also learned a lot from the organizational point of view I could grab a complete vision of the different phases of master data and terminal dues activities and challenges. On the professional and personal level, this 6 months experiment brought to me much. I consider this training course as a very successful experience, not only regarding the results obtained, but more globally speaking for the experience itself.