Questionnaire:SaadIqbal

MonitoringActivities
1. Howclosearemonitoringevaluationsinlinewiththebusinessobjectives?

2. Doesthemanagementvarythescopeandfrequencyofseparateevaluationsdependingonthe
risk?

3. HowdoesSSGCselect,developandperformsongoingorseparateevaluationstoascertain
whetherthecomponentsofinternalcontrolarepresentandfunctioning?

4. Canyoulistdownafewevaluationsrelatedtoseparatedepartmentsandcorefunctionsofthe
business?

5. DoesSSGCestablishabaselineunderstandingofthedesignandcurrentstateoftheongoing
controlactivities?Ifyesthenhow?

6. Doesthemanagementconsiderchangeintheongoingcontrolactivities,iftheyexperiencea
flaworglitchinthesystem?Canyoustateanyexampleofarevampoftheongoingcontrol
systematSSGC?

7. Istheevaluationconductedinhouseoroutsourced?Whatlevelofknowledgeableand
experiencedpersonnelareinvolvedincarryingouttheevaluations?

8. Aretheongoingevaluationsandfuturepreferencesofevaluationsystemsintegratedwiththe
businessprocessesandadjusttoongoingchanges?

9. Howoftendoestheorganizationevaluatesandcommunicatesinternalcontroldeficienciesina
timelymannertothosepartiesresponsiblefortakingcorrectiveaction,includingsenior
managementandboardofdirectors?

10. Whatistheprocessoftakingcorrectiveactionagainstthedeficienciescommunicated?

11. Canyoupleaseshareaninstancewheresuchdeficiencieswerecommunicatedtothe
responsiblepartiesandcorrectiveactionwastakeninatimelymanner?