organise a timetable combining obligations and checks based on risk
1. Regulatory Concept & Core Standards
This video's topic is an annual monitoring plan. By the end, you should be able to organise a timetable combining obligations and checks based on risk. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Receipt and follow-up require a mandate, impartiality and resources. They may connect with integrity coordination, but the functions are not automatically identical. This course organises decisions, cover arrangements and management information according to the local framework. The law of 16 May 2023 governs the reporting channel. Proposed risk plans, codes, calendars and control tools are organisational good practice unless a separate applicable rule creates a duty. Public-service or public-procurement requirements must not be generalised to every private business.
An annual plan connects applicable obligations, risks and resources. It may include control reviews, training, cover and channel operation checks. Internal frequency serves management needs. Statutory deadlines must be identified separately. Gathering evidence throughout the year avoids concentrating all work on preparing a report.
Apply the following rule: For internal channels, article 7 requires acknowledgement within seven days of receipt. Feedback is due no later than three months after acknowledgement or, without acknowledgement, after expiry of the seven days following the report. Feedback is not necessarily the conclusion of the investigation. For competent external authorities, article 19 provides seven days for acknowledgement, with the statutory exceptions stated there, and three months or six months in duly justified cases for feedback. The external exceptions do not automatically change the internal rule.
2. Practical Implementation & Procedure
List applicable national obligations separately from internal preparation dates. Allow time for collection, validation and decisions. Include higher-risk checks and actions arising from earlier cases. Identify the source, owner and evidence for each task. Legislative changes should trigger review of tasks and training content. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.
Article 10 gives the Office des signalements an annual reporting task. Article 21 requires competent authorities to review their external reporting procedures regularly and at least once every three years. Neither provision imposes that same annual return or three-year risk-plan timetable on every private company. The company must identify its own applicable legal duties and distinguish them from its internal monitoring plan.
3. Case Study & Compliance Action
A fictional plan puts every check on the last day of the quarter. An absence prevents message approval and delays follow-up. The coordinator distributes collection across the period, appoints cover and separates statutory dates from internal meetings. Monitoring can proceed without exposing case contents to the whole management team. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.
The exercise is as follows: Does a change in external reporting obligations remove the need for regular internal monitoring? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.
No. Internal monitoring remains necessary. Changing external reporting does not remove the need to check controls and measures. The plan must reflect national duties that actually apply and update its legal and institutional references.
One mistake to avoid is: copying last year's timetable without reviewing regulatory changes and risk priorities.
Now apply the national rule to a second decision. The platform uses a fixed 90-day period for every country, starting when someone opens the message. Can this setting be retained?
Not without validating the local rule. Use the correct starting event and unit, distinguish acknowledgement from follow-up and allow only permitted extensions. Test receipt outside working hours, month-end dates and the responsible person's absence. Opening a message does not automatically change the legal date of receipt.