Designing Controls for Effective Testing

Testing problems rarely start in testing.

They start months earlier, when a control is written as “review and approve” and nobody defines what a good review looks like, who signs off or what proof should be left behind. By the time testers get involved, they’re piecing together screenshots, emails and sign-offs that don’t quite answer the real question: did this control actually work?

The fix isn’t more testing. It’s better design.

In this 45-minute compliance. Curated. [Online] session, we’ve invited two practitioners who see control design from both sides. Brenda Loh has spent more than 20 years in governance, risk and compliance, building and running control frameworks across Europe and Asia. Paul McLaughlin brings the assurance perspective, with nearly two decades of building internal audit and risk functions across industries.

Together, they’ll share how to build controls with testing in mind from day one, so the first line knows exactly what’s expected and testers get the evidence they need the first time around.

In this session, we'll be exploring:

• The W-questions every control description should answer – who, what, when and how
• What good evidence looks like and how to make it clear to control performers upfront
• Where to draw the line between standardized controls that scale and the detail needed for consistent execution
• Why vague controls and overly prescriptive ones both create testing headaches
• How to keep control design and testing on track when processes change
• A live Q&A: bring your questions or send them in advance

 Join us to find out how a little more intention at the design stage can save a lot of time in testing and give you real confidence that your controls work.  

P.S. Compliance. Curated. [Online] is our webinar series designed to inspire professionals working with risk and internal control management. Check out our other sessions on YouTube.