Is EBCE basically doing the same work as IT&V but on the front line? What percentage of your week is spent in RCSA workshops? Can someone please explain. Thanks.
10 replies (most recent on top)
ITV only tests high rated controls, I believe. EBCE focuses more on lower/moderate risk but their testing isn't very in depth.
EBCE - the weaker of the weakest . ITV - definitely not an ATV. Barely runs anywhere .
EBCE only tests controls, which T&V does as well, but typically in the context of an engagement or a targeted test on a process where controls exist or an issue validation. So while T&V will determine if the controls remediate the risk it's aligned to and if the controls are being executed as written, but EBCE basically only tests if the controls are being executed as designed irrespective of whether the control mitigates a risk or resolves an issue.
That's not true.
EBCE only tests controls, which T&V does as well, but typically in the context of an engagement or a targeted test on a process where controls exist or an issue validation. So while T&V will determine if the controls remediate the risk it's aligned to and if the controls are being executed as written, but EBCE basically only tests if the controls are being executed as designed irrespective of whether the control mitigates a risk or resolves an issue.
And since I'm in IRM, I am in 6+ workshops a year, so approximately 6 months, however, between the workshop and IRM breakout sessions, it's about 6-6.5 hours per day, but the review of the extracts that come out after each workshop session, that adds another hour or two - so you're essentially fully dedicated to the effort, even if not in an actual workshop session while that RCSA workshop is going on. Then afterwards, it's making sure the business makes all the required changes per RCB before affirmation, is opening up the appropriate issues that came out of workshop, reviewing and challenging those, reviewing any KRIs needing to be created as a result of workshop, etc.......then as they're remediating/closing the issues that came out of the RCSA event, reviewing/challenging the work done via tollgate, etc...........so it goes on and drags on quite a while for both front and second line.
Don’t know which one is which but one is a freshwater leech and the other is a saltwater leech.
EBCE is a disaster. Another exercise where their entire team is in disagreement and in direct conflict with each other on how to execute all the while, wasting the businesses time going back and forth.
It’ll change in 2025
This thread...🥱
Like the doctor's office or car mechanics, they are incentivized to find something wrong, no matter how good things may be.
It’s bananas, post RCSA 30-50% of my day. And then there is a team to manage.