RCM Library

Entity-Level Controls RACM

A practitioner-built risk and control matrix for the Entity-Level Controls cycle, built in the same column architecture as every Ditton RACM and intended for SOX and ICFR documentation, control design assessment and programme build.

Intended scope

What we’re building

  • Control environment
  • Governance and oversight
  • Risk assessment
  • Information and communication
  • Monitoring

Release list

Want this process next? Join the release list

We’ll email you when it’s released.

See the format: the Procure-to-Pay RACM is available now.

Explore Procure-to-Pay

Have an ICFR issue to discuss?

Start a conversation