Soma pilot 01 · RCM

Pilot · In progress

Create an RCM draft from process descriptions

Read process descriptions, interview notes, and existing RCMs to organize risks, control objectives, control activities, and evidence structures. Automation creates the draft, and you confirm the adequacy and final wording of the controls.

RCM draftDraft structure
process
Sales/Accounts Receivablestructured
danger
Unauthorized revenue recognitionNeeds review
control activities
Delivery, tax invoice, sales slip ambassadordraft
proof
Monthly Ambassador's Statement/Review Signatureconnection candidate

The actual column names and output format match the form used when starting the pilot.

Input

Materials needed to begin

We don't ask for all the data at once. After checking the data you have, determine the pilot scope.

  • Process description, interview memo, work flow chart
  • Existing RCM or company standard form
  • Account and process/management leader mapping
  • Controller, cycle, and proof example

Workflow

Drafting workflow

  1. 01

    data structuring

    Divide narrative data and existing table entries into process, risk, and control units.

  2. 02

    Candidate Connection

    Links risks, control objectives, control activities and management assertion candidates.

  3. 03

    Create control phrases

    Draft control statements that identify who is responsible, how often, what is done, and what evidence is provided.

  4. 04

    person review

    Review duplicates, omissions, and expression differences, and export only confirmed items to RCM.

Output

Pilot deliverables

RCM draft

Organize processes, risks, control objectives and control activities into columns on the company form.

Needs review list

Items with multiple account/claim candidates or insufficient evidence are displayed separately.

change tracking

Compared to the existing RCM, it leaves control candidates that have been added, changed, or deleted.

What requires human approval

The importance of risk, whether there are key controls, the appropriateness of control design, and mapping of management claims are not automatically determined. The person in charge makes a decision after checking the substance of the work and company policy.