A risk exposure and tolerance tool.
Like many organizations, the Canadian Revenue Agency (CRA) had to adjust its risk tolerance levels during the pandemic. CRA audit and risk professionals subsequently developed an assessment tool to gauge the impact of these adjustments and consider the sufficiency of controls. Combining the power of internal auditing and ERM into one tool can help the CRA improve the effectiveness and efficiency of its risk management practices.
