Risk Management
Risk Treatment Cost-Benefit
Weighing treatment spend against expected residual reduction.
Making sure mitigation spend buys real risk reduction
Public funds spent on risk treatment must demonstrate value, and the principle of economic, efficient and effective use of resources under section 38 of the PFMA applies to mitigation budgets as much as to any other spend. A treatment that costs more than the exposure it removes is a finding waiting to happen. AuditPro Core weighs treatment spend against expected residual reduction so the accounting officer can defend every rand of mitigation as value for money.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Treatments costed
48
Total treatment spend
R 27.3 m
Low-value treatments
7
< 1 pt per R1m
High-value treatments
19
Residual reduction per R1m spend
Cost-benefit ranking
| Treatment | Cost (Rm) | Residual ▼ | Value |
|---|---|---|---|
| MFA rollout | 1.2 | 5 | High |
| Vendor vetting | 0.8 | 3 | High |
| Meter audit | 3.4 | 4 | Medium |
| Fleet tracking | 5.1 | 2 | Low |
| DR site | 8.2 | 6 | Medium |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Cost of treatment
Treatment cost is more than the procurement line; it includes implementation effort, ongoing operation and any productivity drag the control imposes. Counting only the obvious cost understates the true price of a mitigation.
Expected reduction
The benefit side is the modelled fall in residual exposure once the treatment operates as designed. Expressing both sides in money terms makes the comparison meaningful rather than impressionistic.
Diminishing returns
Beyond a point, extra control spend buys very little additional reduction. Plotting cost against benefit exposes the mitigations sitting past that point, where money would be better redirected.
Risk acceptance
Sometimes the cheapest defensible answer is to formally accept a small risk rather than over-control it. The analysis gives the board the evidence to accept consciously instead of spending reflexively.
How AuditPro Core Bridges the Gap
- Full-cost capture: treatment records hold implementation and run-rate cost, not just procurement value, for an honest denominator.
- Reduction modelling: expected residual movement is recorded against each treatment so benefit is quantified, not asserted.
- Exception flagging: treatments where cost exceeds expected benefit are surfaced for review and possible risk acceptance.
- Audit-ready export: the cost-benefit position exports as evidence of value-for-money decision-making.
Key Takeaways
- Count the full lifetime cost of a control, not just its purchase price.
- Express both cost and benefit in money to compare them honestly.
- Watch for treatments past the point of diminishing returns.
- Conscious risk acceptance can be the most defensible option.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.