RCM Library
Procure-to-Pay RACM
A practitioner-built risk and control matrix for the Procure-to-Pay cycle, designed for SOX and ICFR documentation, control design assessment and programme build.
Coverage
- Vendor onboarding
- Vendor master changes
- Purchase requisition and approval
- Purchase orders
- Goods receipt
- Invoice processing
- Three-way match
- Payment processing
- Period-end AP
RACM architecture
Column groups used consistently across every Ditton RACM.
- Risk
- Assertions
- Control description
- Attributes
- Testing approach
- Evidence
Sample
| Control ID | Subprocess | Risk | Control activity | Type / Nature | Frequency |
|---|---|---|---|---|---|
| [[TO SUPPLY: sample rows from the PTP RACM]] | |||||
| — | — | — | — | — | — |
| — | — | — | — | — | — |
| — | — | — | — | — | — |
| — | — | — | — | — | — |
Download the sample
Inside the workbook
[[TO SUPPLY: workbook screenshot 1]]
[[TO SUPPLY: workbook screenshot 2]]
[[TO SUPPLY: workbook screenshot 3]]
Who it’s for
- SOX programme teams
- Controllers
- Internal audit
- Advisory firms
Format, licence, updates
- XLSX
- Single-entity licence — licence terms
Questions
What file format is it?
An Excel workbook (XLSX).
What does the licence cover?
Use within a single entity. No resale or redistribution. See the digital product licence.
What is the refund policy?
See the refund policy.
Can I pay by invoice or purchase order?
Yes. Contact us and we’ll arrange it.
Release list
Get updates on this RACM
We’ll email you when the Procure-to-Pay RACM is updated or new processes are released.