Cycle time in calendar days (including weekends) from identification of change in risk until changes to risk management policies and procedures are completed and ready for deployment/communication/implementation by the business entity
This measure calculates the number of calendar days (including weekends) that elapse from identification of change in risk until changes to risk management policies and procedures are completed and ready for deployment/communication/implementation by the business entity. It is part of a set of Cycle Time measures that help companies analyze the duration from beginning to end of the "operate controls and monitor compliance with internal controls policies and procedures" process, which incorporates planning, management, operations, and monitoring of internal control mechanism policies and procedures in order to manage internal controls.
Benchmark Data
25th | Median | 75th |
---|---|---|
- | - | - |

Compute this Measure
Units for this measure are days.
Cycle time in calendar days (including weekends) from identification of change in risk until changes to risk management policies and procedures are completed and ready for deployment/communication/implementation by the business entity
Key Terms
Cycle time is the total time from the beginning of the process to the end. This includes both time spent actually performing the process and time spent waiting to move forward.
The metric value which represents the 50th percentile of a peer group. This could also be communicated as the metric value where half of the peer group sample shows lower performance than the expressed metric value or half of the peer group sample shows higher performance than the expressed metric value.
For survey purposes, a business entity is defined as an entity that:
- performs significant aspects of the processes for the surveys identified, or
- is part of a cost or revenue center within the company.
Within your organization, diverse departments may be geographically co-located, with closely integrated operations that form part of one "business entity" which may be a great distance apart. When trying to determine if related parts of your operation should be considered a single business entity, look for the following characteristics:
- Do they operate closely together?
- Do they serve many of the same customers?
- Do they support the same region or product group?
- Do they share any performance measures?
- Is data meaningful at a consolidated level?
Examples of business entity definition:
- A general ledger accounting unit located in Germany has two groups. One performs general ledger accounting for the corporate headquarters, which has three business units. The other group does general ledger accounting for one of the three business units. In spite of their geographic co-location, their roles are substantially different and consolidating their data into a single response would make it less meaningful. Each group should be treated as a separate business entity.
- Three business units within a corporation use a shared services center for accounts payable and expense reimbursement, but are self-supporting for the other financial processes. The best approach is to make the shared services centre a separate business entity for accounts payable and expense reimbursement, and to retain the three original business units for the other financial processes.
- A global manufacturing company has five plant locations, each manufacturing product and each with its own logistics operations. For purposes of completing a manufacturing and logistics survey, they should be treated as five separate business entities.