Tender Procedure Check List 招投标内控清单.docVIP

Risk and Control Assessment Check List Entity Area Tendering Policies and Procedures Prepared by Date Reviewed by Date Approved by 1. Introduction Purpose of Risk and Internal Control Assessment Check List The following Risk and Internal Control Assessment Check List (“RICAC List”) is established for management to evaluate their business operations procedures, to ensure that they are fully aware of risk exposures and pertinent internal controls in addressing these risks are effective. The sample of risk exposures and key internal controls are defined in the RICAC List. However, the RICAC List is not intended to be all-inclusive. Management should consider other risks and mitigating controls, taking into account of the company’s specific circumstances, and define in the RICAC List in detail. How to complete the check list Risk Assessment Form The sample risk exposures are provided in Risk Assessment Form (“RAF”). Management should assess the potential impact of the risk on the operations. Failure effect with significant amount and high or moderate occurrence possibility, or moderate amount but high occurrence possibility should be considered as High Risk; Failure effect with moderate amount and moderate occurrence possibility, or significant amount but remote occurrence possibility should be considered as Mid Risk; Failure effect with moderate amount and remote occurrence possibility, or low value amount should be considered as Low Risk. The criteria for risk assessment are not absolute. Management should apply their best judgment in deciding the risk level. Any other risk exposures are not included in the form should be specified, with risk level assessed. (b) Key Internal Control Assessment Form Sample key internal controls are provided in the form. Management should assess the effectiveness of those controls in operation. If the existing control works effectively, tick the YES box in the assessment column; If the listed control does not exist