Update CLC.md

Signed-off-by: Dennis Eichhorn <spl1nes.com@googlemail.com>
This commit is contained in:
Dennis Eichhorn 2024-03-20 12:46:11 +01:00 committed by GitHub
parent 387a911f49
commit ebb86c7551
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -20,9 +20,9 @@
| 16 | Control Environment | Personnel deployment and training | Does the management provide employees, etc. with the means, training etc. necessary to fulfill their duties and support them in the improvement of their abilities and how is this implemented? | This is done during the training period and checked in the employee evaluation. If additional training or competencies are identified they are trained internally or through external seminars. | [Training Plan](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/HR/Onboarding/Sample%20Training%20Plan.md)<br />[Employee Evaluation Form](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/HR/Evaluation%20Forms/Employee%20Evaluation%20Form.md) |
| 17 | Control Environment | Personnel evaluation | What are your personnel evaluation standards? | All employee evaluations must be performed based on the standard evaluation form once a year. | [Employee Evaluation Form](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/HR/Evaluation%20Forms/Employee%20Evaluation%20Form.md) |
| 18 | Control Environment | Personnel evaluation | How are the personnel evaluation standards regularly reviewed and updated appropriately? | During the annual quality management audit the evaluation form is reviewed. | [Quality Management Audit Checklist](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/Quality%20Management/Quality%20Management%20Audit%20Checklist.md) |
| 19 | Risk Assessment and Response | Risk assessment structure | Is there an effective risk assessment system that involves appropriate levels of the management and managers? | Yes. | [Risk Management](Risk%20Management/Risk%20Management.md)<br />Risk Review<br />Risk Register<br />[Processes](../../)<br />Process Risk Control Matrix |
| 20 | Risk Assessment and Response | Risk assessment structure | Does the management asses the risk considering not only superficial facts but also backgrounds, incidents and other substantial elements? | Yes. | [Risk Management](Risk%20Management/Risk%20Management.md)<br />Risk Review<br />Risk Register<br />[Processes](../../)<br />Process Risk Control Matrix |
| 21 | Risk Assessment and Response | Risk assessment structure | Does the management appropriately assess and address fraud risks based on not only superficial facts regarding fraud, but also incentives, causes, backgrounds and other factors that may result in fraud? | Yes. | [Risk Management](Risk%20Management/Risk%20Management.md)<br />Risk Review<br />Risk Register<br />[Processes](../../)<br />Process Risk Control Matrix |
| 19 | Risk Assessment and Response | Risk assessment structure | Is there an effective risk assessment system that involves appropriate levels of the management and managers? | Yes. | [Risk Management](Risk%20Management/Risk%20Management.md)<br />Risk Review<br />[Risk Report](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/Quality%20Management/COSO/Risk%20Management/Risk%20Report.xlsx)<br />[Processes](../../)<br />Process Risk Control Matrix |
| 20 | Risk Assessment and Response | Risk assessment structure | Does the management asses the risk considering not only superficial facts but also backgrounds, incidents and other substantial elements? | Yes. | [Risk Management](Risk%20Management/Risk%20Management.md)<br />Risk Review<br />[Risk Report](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/Quality%20Management/COSO/Risk%20Management/Risk%20Report.xlsx)<br />[Processes](../../)<br />Process Risk Control Matrix |
| 21 | Risk Assessment and Response | Risk assessment structure | Does the management appropriately assess and address fraud risks based on not only superficial facts regarding fraud, but also incentives, causes, backgrounds and other factors that may result in fraud? | Yes. | [Risk Management](Risk%20Management/Risk%20Management.md)<br />Risk Review<br />[Risk Report](https://github.com/Karaka-Management/Organization-Guide/blob/master/Processes/Quality%20Management/COSO/Risk%20Management/Risk%20Report.xlsx)<br />[Processes](../../)<br />Process Risk Control Matrix |
| 22 | Risk Assessment and Response | Risk assessment structure | How does the management reassess the risk and take appropriate measures whenever changes occur that may have a significant impact on the company? | This is done at least annually during the risk review. | Risk Review |
| 23 | Communication and information | Communicating information | How are the management's or supervisor's instruction communicated to all employees? | This is done by providing the processes, policies and guidelines to all employees. | [Processes](../../)<br />[Guidelines & Policies](https://github.com/Karaka-Management/Organization-Guide/tree/master/Policies%20%26%20Guidelines) |
| 24 | Communication and information | Internal reporting | Do you have the Whistleblower System or other internal reporting program? | Yes, there is a whistleblower system in place. | [Whistleblower System](https://github.com/Karaka-Management/Organization-Guide/blob/master/Policies%20%26%20Guidelines/Whistleblower%20System.md) |