Audit of Enterprise Risk Management - Internal Oversight Reports - IOD Audit Engagement Note

Sep 12, 2026

Upload by Grenda

Audit of Enterprise Risk Management sets out the Internal Oversight Division’s evaluation of how ERM supports operational and strategic objectives at WIPO. The report explains engagement objectives, scope, and methodology, then summarizes engagement results covering background context, engagement outcomes, positive developments, and key observations with recommendations. It details ERM surveys, the ERM framework and risk appetite, governance and organizational structure, process and integration, ERM systems and tools, risk capabilities, and risk culture, including annexes and a table of recommendations.

LanguageEnglish

CategoryPresentations

FormatPDF

Pages90

Reading Time31 min

AccessFree to download

LIST OF ACRONYMS

EXECUTIVE SUMMARY

BACKGROUND

ENGAGEMENT OBJECTIVES

SCOPE AND METHODOLOGY

ENGAGEMENT RESULTS - OUTCOME(S)

ENGAGEMENT RESULTS - POSITIVE DEVELOPMENTS

ENGAGEMENT RESULTS - OBSERVATIONS AND RECOMMENDATIONS

IOD SURVEYS

ERM FRAMEWORK AND POLICY

RISK MANAGEMENT GOVERNANCE AND ORGANIZATIONAL STRUCTURE

PROCESS AND INTEGRATION

ERM SYSTEMS AND TOOLS

RISK CAPABILITIES

RISK CULTURE

TABLE OF RECOMMENDATIONS

ANNEXES

Audit of Enterprise Risk Management Internal Overs ight Reports IOD Ref: IA 2021-01 March 8, 2022 IOD Audit Engagement Note: Parts of the original report were withheld or redacted on grounds of information security. TABLE OF CONTENTS LIST OF ACRONYMS.............................................................................................................3 EXECUTIVE SUMMARY .........................................................................................................4 1. BACKGROUND ...............................................................................................................6 2. ENGAGEMENT OBJECTIVES.........................................................................................8 3. SCOPE AND METHODOLOGY........................................................................................8 4. ENGAGEMENT RESULTS – OUTCOME(S) .....................................................................9 5. ENGAGEMENT RESULTS-POSITIVE DEVELOPMENTS ............................................ 10 6. ENGAGEMENT RESULTS-OBSERVATIONS AND RECOMMENDATIONS................. 11 (A) IOD SURVEYS ........................................................................................................ 11 (i) IOD Survey on ERM at WIPO ................................................................................... 11 (ii) IOD External Survey on ERM with United Nations Representatives of Internal Audit Services (UNRIAS) ......................................................................................................... 11 (B) ERM FRAMEWORK AND POLICY........................................................................... 12 (i) ERM Framework ...................................................................................................... 12 (ii) WIPO Risk Appetite.................................................................................................. 14 (iii) ERM Framework Self-assessment and Improvement mechanisms ............................ 16 (C) RISK MANAGEMENT GOVERNANCE AND ORGANIZATIONAL STRUCTURE .......18 (i) Risk Management Governance System .................................................................... 19 (ii) Risk Management Function-Comparison with other Organizations...........................22 (D) PROCESS AND INTEGRATION ..............................................................................24 (i) Risk identification and assessment ...........................................................................24 (ii) Developing Risk Responses .....................................................................................26 (iii) Monitoring and Follow-up..........................................................................................29 (iv) Statement on Internal Control ...................................................................................33 (v) ERM Integration with Results Based Planning...........................................................34 (E) ERM SYSTEMS AND TOOLS..................................................................................36 (i) Risk Registers..........................................................................................................37 (ii) Linkage of WIPO Risk Registers with other systems..................................................40 (F) RISK CAPABILITIES................................................................................................40 (i) Staff Risk Awareness ...............................................................................................41 (ii) Availability of Risk Information ..................................................................................44 (iii) Data Analytics Project...............................................................................................45 (G) RISK CULTURE ................................................................................

FAQs

What is the purpose of the Enterprise Risk Management audit?

It assesses how efficient and effective risk management helps the organization achieve operational and strategic objectives, while improving value and sustainability.

Why are parts of the report withheld or redacted?

Some sections were withheld or redacted on grounds of information security.

Which main ERM areas are covered in the engagement results?

The report covers ERM surveys; ERM framework and policy (including risk appetite); governance and organizational structure; process and integration; systems and tools; risk capabilities; and risk culture.

Sep 12, 2026

Upload by Grenda