I attach below a one page summary of control standards which are believed to
be fundamental. This summary, produced as a result of the Doorstep review,
could be a 'yardstick' to benchmark our businesses - ie an aid to
communication between Commercial, Commercial Support and RAC re the level of
Operating Risk within each business and the region as a whole. Consequently
it would be complimentary to the BRM process.



I hope to complete an efficient/judgemental assessment internally for all
businesses in conjunction with RAC and present the findings to yourselves (
and /or your desk managers ) within the next week/10 days. The aim would also
be to establish that the currrent action plans for Systems Development and
Support resource allocation is appropriate. The assessment would be based on
a traffic light scale ie

Green inherent risk less processes/controls gives a residual operational risk
which is accpetable
Amber - watch out - residual operational risk is high and/or control trend
is decreasing
Red - stop now we have problem ( Helsinki equivalent ! )

Upon completion of the assessment I will book some time in your diaries

Regards

Mike