The National Credit Union Administration (NCUA) Office of Inspector General (OIG) conducted this self-initiated audit to assess the NCUA’s Enterprise Risk Management Risk Profiles. The objective of our audit was to determine if the NCUA adequately established, maintained, and used risk profiles to address enterprise-level risks.
Open Recommendations
| Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
|---|---|---|---|---|---|
| 1.OIG-26-05 | No | $0 | $0 | ||
| Implement a regular assessment and briefing of all enterprise-level risks, such as through discussion of risk profiles at ERM Council meetings, on a frequency commensurate with risk exposure to monitor that each risk is managed within risk appetite. | |||||
| 2.OIG-26-05 | No | $0 | $0 | ||
| Clarify how the ERM Council should communicate risk results to agency officials who implement decisions. | |||||