Company Name. - DEPARTMENT REPORT
DEPARTMENT:
DATE:
Key Performance Indicators (KPIs) Jan-22 Feb-22 Mar-22 Apr-22 May-22 Jun-22 Jul-22 Aug-22 Sep-22 Oct-22 Nov-22 Dec-22
Projects Progress Updates
YTD
Target YTD Variance MTMVariance YTD%age Achieved YTD
Due Date
Status
Key Decisions Required from ManCom
Target MTM
Impact of Decision
Due Date
Communication to ManCom
Top 5 department Risks
Review Issues Raised - QMR, Internal Audit and other
Action plan/Mitigant - By When
Status
Risk Owner
Due Date
Company X. - DEPARTMENT REPORT
Key Performance Indicators (KPIs)
DEPARTMENT: Controls
Jan-22 Feb-22
DATE: 29-Apr-22
Mar-22
Apr-22
YTD
Target MTM
Target YTD
1. Cost saving initiatives identified
0
1
4
0
May-22 Jun-22 Jul-22 Aug-22 Sep-22 Oct-22 Nov-22 Dec-22
0
1
0
0
0
2
1
0
1
1
3
Variance MTM Variance YTD
-1
-2
%age Achieved YTD
-75%
2. Control lapses identified
3. Number of departmental/Branch reviews
undertaken
3
4
6
7
4
7
11
15
17
5
10
8
8
5
15
3
-7
-46%
0
4
20
1
2
4
14
9
21
5
2
0
7
25
28
-25
-21
-76%
4. Update and follow-up of the Risk Register
5. Submission, interpretation of exceptional
reports
6. Update of Policies, Procedures and Process
flows
30%
30%
60%
60%
60%
60%
60%
60%
60%
60%
70%
70%
57%
100%
100%
-30%
-43%
-43%
30%
30%
50%
50%
50%
50%
50%
50%
50%
60%
60%
60%
49%
100%
100%
-40%
-51%
-51%
0%
20%
20%
20%
30%
30%
35%
35%
30%
20%
20%
20%
23%
100%
100%
-80%
-77%
-77%
7.Trainings administered
0%
20%
80%
80%
80%
70%
50%
100%
100%
100%
60%
0%
62%
100%
100%
-100%
-38%
-38%
Projects Progress Updates
Status
Due Date
1. BRS Implementation and testing
Tested across all branches. Tests successful for email.
30-May-22
2. Risk Register updates
Held meetings with all risk owners and discussed the risk awareness and environment within the respective units.
31-May-22
3. Penetration testing
Identified a provider - FIDENS France, and testing has already commenced.
30-Jun-22
4. Review of compliance with laws and regulations
18 laws of Uganda summarised in as far as the affect Outsourcing. Conformance reviews now underway.
30-Jun-22
5. Risk Trainings
Undertook trainings on Fire Awareness/Fighting, Fraud and Incident Reporting for all departments
30-Apr-22
Key Decisions Required from ManCom
Impact of Decision
HR Software - full usage not yet in place
Calculation of Local Service Tax still a challenge, thus payroll module in the HR software not being used
Physical access controls at Head Office
Minimise infiltration into ICT by unauthorised individuals.
Temporary staff at Call Centre
Without due appointment letters, makes it difficult in the event of mis conduct and insurance claims
Use of personal vehicle for CIT
Puts the Branch staff at high risk
Due Date
Communication to ManCom
1. Need to quickly recruit staff to fill missing positions
2. Respond to the Financial Consumer Protection Guidelines - Credit, Legal, Retail, Operations
3. Process flows update for respective units - needs to be given priority by all EXCO Heads
4. Frauds - Cairo Bank Pensions funds 63bn, Mobile Money fraud Arua Branch 1.3m, forged E-tax BOAU receipts for passports at URA, Ushs 5m shortage at Nakivubo Branch
Top 5 department Risks
Action plan/Mitigant - By When
Risk Owner
1. Inability/difficulty to generate reports
Engage the MIS developers to enhance the functionalities of the new MIS system. Continue to use the available reports in Igor
HOF
2. Failure to update the risk register on time
Put in place a checklist that ensures that all risks identified during the period are captured and recorded on the register
HOF
3. Unclear fraud management process
Review the Fraud Process
HOF
4. Involvement in operational tasks
Utilise Branch Control function as much as possible
HOF
5 Lack of skills for bank wide risk management
Identify specialised training opportunities for members within Risk and Control
HOF
Review Issues Raised - QMR, Internal Audit and other
Status
Due Date
1. Un-updated business continuity procedures
Review and updates currently underway
31-May-22
2. Out-dated Disaster Recovery Policy
Review and updates currently underway
30-Apr-22
3. Critical systems not tested under disaster recovery tests
These were tested under Q1 DRP tests
30-Apr-22
4. Inadequate business continuity service delivery test follow-up
Follow up of these findings and recommendations is currently under way
30-Apr-22