Risk Management
Inherent Impact Band Distribution
Distributing registered risks across five pre-control financial-impact bands.
Reading inherent impact before controls flatter the picture
Assessing inherent risk before any control credit is what separates a disciplined register from a wishful one, because it forces the organisation to confront the raw financial exposure it is carrying. The COSO ERM framework and GRAP-based materiality thinking both expect impact to be sized in money terms, not adjectives. AuditPro Core distributes registered risks across five inherent financial-impact bands so the accounting officer can see where the genuinely large exposures sit before mitigation is considered.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Risks profiled
184
Catastrophic band
14
> R50m impact
Negligible band
48
Median impact
R 4.2 m
Risks by inherent impact band
Impact bands and rand thresholds
| Band | Rand threshold | Risks | Share % |
|---|---|---|---|
| Negligible | < R 0.5 m | 48 | 26 |
| Minor | R 0.5m–R 5m | 52 | 28 |
| Moderate | R 5m–R 20m | 41 | 22 |
| Major | R 20m–R 50m | 29 | 16 |
| Catastrophic | > R 50 m | 14 | 8 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Inherent versus residual
Inherent impact is the consequence assuming controls fail or do not exist; residual is what remains after controls work. Banding the inherent view first prevents controls from quietly hiding the size of a problem.
Why bands beat free numbers
Grouping impact into five calibrated bands makes risks comparable across very different functions. A R50m service-delivery risk and a R50m fraud risk land in the same band and can be debated on equal footing.
Financial calibration
Each band should be anchored to a money threshold linked to the entity's budget and materiality, not borrowed from a template. This keeps the top band meaningful for a small municipality and a large department alike.
Distribution shape
A register clustered entirely in the lowest bands often signals optimism rather than safety. The shape of the distribution is itself a quality indicator for internal audit to challenge.
How AuditPro Core Bridges the Gap
- Threshold configuration: impact bands are set against the entity's own budget and materiality, keeping comparisons relevant.
- Pre-control capture: the register records inherent impact as a distinct field so control credit never overwrites the raw exposure.
- Traceability to source: each banded risk links to its assessment rationale and owner for challenge during review.
- Continuous monitoring: shifts in the distribution between assessment cycles flag for committee attention automatically.
Key Takeaways
- Size inherent impact in rands, then band it for comparability.
- Anchor band thresholds to your own budget and materiality.
- Keep inherent and residual as separate, visible fields.
- A distribution skewed to the low bands deserves a challenge, not comfort.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.