2.3.2 Quantitative evaluation. Two of the main quantitative factors used in OR management, besides business environment and internal control factors, scenario analysis and external data, are risk indicators and the analysis of loss events.
The internal auditors will design procedures for the review of these types of factors, keeping in mind that they combine with qualitative factors as part of the entity’s global OR framework.