Identify risks and manage them effectively

Audit of your risk management system according to
IDW PS 981

Do you require a reliable assessment of your risk management system (RMS) for informed internal decision-making, to meet internal or external requirements, or for transparent reporting to management, the supervisory board, the audit committee, or relevant regulatory authorities?

From the initial analysis of your RMS to the final audit report, Certinova is by your side, creating transparency regarding the structure, implementation, and effectiveness of your RMS.

Have your RMS audited now and create lasting transparency.

Two schematic representations of user interfaces featuring a calendar view and lists, along with a large blue hexagonal certification stamp displaying Certinova, IDW PS 981, RMS, and Compliant.
Certinova – the innovative provider

Certinova by the numbers

>30%

more efficient audit processes

Digital workflows and reusable evidence reduce manual effort – especially during re-certification.

250+

audits conducted

Numerous completed audit and assessment projects form the basis of our methodology.

100+

Customers worldwide

SaaS providers, cloud platforms, IT service providers, and regulated companies rely on Certinova

IDW PS 981 - Risk Management System

From appropriateness to effectiveness

From assessing the structure of your RMS to auditing its effectiveness: we offer the right service for your current situation.

Assessment of appropriateness

We assess whether your risk management system (RMS) aligns with your company's objectives, business model, and individual risk profile. Depending on the level of maturity, an appropriateness audit is the ideal starting point and provides the foundation for a subsequent effectiveness audit.

Assessment of effectiveness

We assess whether the intended procedures were implemented during the audit period and whether risk identification, management, monitoring, and reporting function in practice. This reveals whether risks are reliably managed in day-to-day operations.
‍

What decision-makers really want to know before an audit.

Answers to frequently asked
questions about IDW PS 981

The most important answers regarding the audit of your RMS – from the fundamentals of IDW PS 981 to the assessment of appropriateness and effectiveness.

Can't find your question? Please contact us directly.

What are the benefits of an effective risk management system?

An effective RMS creates transparency regarding a company's material risks and helps to identify, assess, and specifically manage them at an early stage. This enables management and committees to make more informed decisions, clearly assign responsibilities, and prioritize measures in a transparent manner.

What are the benefits of an IDW PS 981 audit for our company?

An audit according to IDW PS 981 provides an independent and verifiable assessment of your RMS. It demonstrates whether risks are systematically identified, assessed, managed, and monitored, and whether the structures and processes established for this purpose are appropriately designed. This provides management and committees with a reliable basis for decision-making, the prioritization of measures, and the further development of risk management. Furthermore, responsibilities, reporting channels, and potential for improvement are documented transparently.

What is examined during an appropriateness audit according to IDW PS 981?

Appropriateness focuses on whether the RMS is designed to suit the company's objectives, business model, and risk profile. The decisive factor is whether the intended processes and structures provide an appropriate framework for managing risks.

What is examined during an effectiveness audit according to IDW PS 981?

The effectiveness audit examines whether the RMS was not only appropriately designed during the defined audit period but also actually implemented and applied. Within the agreed audit scope, suitable evidence is used to determine whether risks are systematically identified, assessed, managed, and monitored, whether responsibilities are being fulfilled, and whether the established reporting and escalation channels function in practice.

Get started now!

Let's get in touch to discuss your requirements.