P2P Risk and Control Matrix
Sharing the results of your risk assessment in a visual manner allows your team to be
aware of their individual responsibilities and how they interact.
To complete the Risk and Control Matrix you will need to: Define your risks and risk level,
decide which controls you will need to mitigate the risks, elect a control owner and then
re-define the risk level after the control has been applied.
Control Risk Level
Risks Risk Level Control Description
Owner After Control
Reconciliations, System Validations,
LE
Invoice Fraud High John Doe Low
Verification checks, Fraud detection software
Policies, Procedure, System Validations,
Errors Low Reconciliations, Segregation of duties, Jean Doe Very Low
audit software
Policies, Procedure, Flagging incorrect or
Non-Compliance Medium Jane Doe Very Low
missing data in risk detection software.
P
Sanctions, ESG and Credit Score Monitoring,
Unreliable Master Approvals, Purchase order procedure,
Medium Joe Doe Very Low
Supplier File
Supplier file audit
M
Procedure, automation,
Manual Internal Processing Medium June Doe Very Low
risk detection software
Poor Spend Visibility Medium Analytics and reporting Juan Doe Low
A
EX
t: +44 (0) 845 680 1905 FISCAL Technologies is a world-leading provider of forensic solutions and services that empower Procure-to-Pay teams
across the globe to protect organizational spend.
e: [email protected] Incorporating unique technology to reduce risk in the supply chain, FISCAL Technologies’ awardwinning, cloud-based risk
management platform is used on a continuous, preventative basis to protect vendor spend, defend against fraud, increase
profitability and drive process improvement. Since 2003, FISCAL’s solutions have processed over 1 billion transactions with a
w: www.fiscaltec.com value of over $7 trillion in spend, and are now relied upon by over 250 leading private and public sector organizations.
Copyright 2021 FISCAL Technologies. All rights reserved. The FISCAL Technologies, AP Forensics and NXG Forensics names,
logos and taglines are trademarks of FISCAL Technologies. Document ID: Risk and Control Matrix
P2P Risk and Control Matrix
Control Risk Level
Risks Risk Level Control Description
Owner After Control
t: +44 (0) 845 680 1905 FISCAL Technologies is a world-leading provider of forensic solutions and services that empower Procure-to-Pay teams
across the globe to protect organizational spend.
e: [email protected] Incorporating unique technology to reduce risk in the supply chain, FISCAL Technologies’ awardwinning, cloud-based risk
management platform is used on a continuous, preventative basis to protect vendor spend, defend against fraud, increase
profitability and drive process improvement. Since 2003, FISCAL’s solutions have processed over 1 billion transactions with a
w: www.fiscaltec.com value of over $7 trillion in spend, and are now relied upon by over 250 leading private and public sector organizations.
Copyright 2021 FISCAL Technologies. All rights reserved. The FISCAL Technologies, AP Forensics and NXG Forensics names,
logos and taglines are trademarks of FISCAL Technologies. Document ID: Risk and Control Matrix
